Look  inside  Never  mind  terrorists.  The  greatest  threat 
of  cyberattack  lurks  within,  experts  say.  PAGE  12. 


Extreme  gains  Extreme  Networks  launches  an  Ethernet 

backbone  switch  that  puts  out  a  full  10G  bit/sec.  PAGE  8. 
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Whirling  through  the 
world  of  propeller 
beanies 

From  geek  chic  to  gang  style, 
the  tale  of  this  techie  lid  gives 
those  behind  it  their  props. 

■  BY  BOB  BROWN 

While  business  isn’t  bad, Stacy  Samuels 
can’t  help  longing  for  the  boom  days 
of  the  early  ’90s. 

If  your  memory  is  fuzzy  that  was  the  time 
of  the  last  big  propeller  beanie  craze,  most 
notably  in  Baltimore,  where  the  multicol¬ 
ored  hats  morphed  from  being  geek  chic  to 
a  must-have  item  for  the  city’s  youths.  In  one 
incident  that  grabbed  national  headlines, 
police  arrested  a  10-year-old  boy  for  holding 
up  a  0-year-old  at  gunpoint  to  relieve  him  of 
his  rainbow-hued  hat. 

“Everyone  was  buying  them,  kids,  gang 
members,  church-goers,”  says  Samuels,  who 
serves  as  “chief  flight  commander”  at 
Interstellar  Propeller,  a  propeller 
beanie  maker  in  Berkeley, 

Calif. 

While  such  beanies 
might  not  exactly  be  in 
vogue  these  days,  they  re¬ 
main  an  enduring  symbol 
of  all  things  techie.  You 
don't  have  to  look  into  too 

many  cubicles  at  many  high-tech  companies  to  spot  a  propeller 
beanie  of  one  kind  or  another.  Meanwhile,  the  term  “propeller- 
head”  still  says  scientist  or  engineer  to  most  people,  and  has 

See  Beanies,  page  14 
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IP  PBX  push  signals 
Avaya’s  evolution 


■  BY  PHIL  HOCHMUTH 

Avaya  this  week  is  scheduled  to  announce  a  par¬ 
cel  of  IP  PBX  advances,  including  a  new  midsize  sys¬ 
tem,  and  unveil  a  licensing  scheme  that  analysts  say 
shows  the  company’s  mindset  shifting  from 
hardware  to  software. 

The  midrange  box  plugs  a  hole 

in  Avaya’s  IP  PBX  product  line  and 
smoothes  out  the  company’s  scala¬ 
bility  story,  while  the  new  IP  PBX 
license  will  change  the  way  com¬ 
panies  buy  telephony  to  more  of  a 
softwarebased  model. 

Together  the  developments  signal  to  some 
observers  the  beginning  of  the  end  for  Avaya’s  tra¬ 
ditional  TDM-based  Definity  line,  particularly  at  the 
midrange. 

New  products  on  tap  from  Avaya  include: 

See  Avaya,  page  12 


Out  in  front 

Avaya  topped  the  crowded  market  for 
converged  voice  systems  in  the  second 
quarter.  others 


Alcatel  - 

4.4% 


9.7% 


■  Free  IP 
PBXs  anyone? 
That’s  what 
Volo  Commu¬ 
nications  is 
offering. 

Page  10. 


NEC  — 

4.6% 

Nortel  - 

8.5% 

3Com*  _ 

9.8% 

Mitel  - 

10.3% 


Worldwide  line  shipments  for  IP-only  and 
IP/TDM-mixed  PBXs:  728,400 
*  Offers  only  IP  PBXs. 

SOURCE:  INFOTECH 


Siemens 

13.7% 


New  AT&T  president  taiks  telecom 


Faced  with  declining  sales, 
AT&T  last  week  announced 
the  resignation  of  President 
Betsy  Bernard  and  the 
appointment  of  her  replace¬ 
ment,  William  Hannigan, 
chairman  and  CEO  of  travel 
company  Sabre  Holdings. 
After  36  hours  on  the  job. 


Hannigan,  a  former  SBC  and 
Sprint  executive,  shared  a  few 
thoughts  with  Network  World 
Managing  Editor  of  the  Edge 
Jim  Duffy. 

What  attracted  you  to  AT&T? 

I’ve  been  in  the  telecom  indus¬ 
try  22  years,  1 6  of  those  from  a 

See  Hannigan,  page  16 


,tF(JR  QoS  to  the  rescue  Page  22 

Wireless  LANs  are  being  prepped  to  handle  voice  and  video. 

Shakeout  brewii^  Page  47 

There  are  more  than  20  wireless  LAN  start-ups,  but  only  a  handful  will 
survive  once  the  wired  switch  heavyweights  get  their  wireless  acts  together. 


The  Canon  Color  imageRUNNER®  C3200  witli 
image  WARE™  Publishing  Manager  is  anything 
but  business  as  usual.  Actually,  it's  a  totally  new 
way  of  working  that  lets  you  create  and  print 
professional-quality  color  booklets,  catalogs, 
brochures... you  name  it.  In-house,  right  at  your 
desktop.  With  image  WARE  Publishing  Manager, 
you  can  combine  multiple  documents  created  in 
different  applications  to  form  a  single  document. 


Canons  imageWARE  Publishing  Manager  Software. 
Create  and  print  color  documents  right  from  your  desktop. 


You  can  import  images  or  text  streams,  create 


and  format  chapters,  renumber  pages,  insert 
headers  and  footers.  You  can  apply  editing, 
page  imposition,  print  settings,  and  professional 
finishing.  You  can  share  it  all  with  co-workers. 
You  can  manage  it  all  every  step  of  the  way. 


And  we're  just  scratching  the  surface.  This  means 
no  more  endless  waiting  for  that  all-important 
document.  See?  At  long  last,  you're  in  control. 

And  ultimately,  you're  not  stressing  out.  The 
Canon  Color  imageRUNNER  C3200  with 
imageWARE  Publishing  Manager.  Eor  fast, 
affordable  in-house  color  with  professional- quality 
finishing.  So  say  goodnight  to  business  as  usual. 

www.imagerunner.com 

1-800-OK-CANON 


Canon  KNOW  HOW 


Canon  and  Canon  Know  How  are  registered  trademarks  of  Canon  Inc.  IMAGERUNNER  is  a  registered  trademark  of  Canon  Inc.  in  the  U.S.  and  Canada.  IMAGEWARE  is 
a  trademark,  and  IMAGEANYWARE  is  a  sennce  mark  of  Canon  U.S.A.,  Inc.  ©2003  Canon  U.S.A.,  Inc.  Product  shown  with  optional  accessories.  imageWARE  Publishing 
Manager  must  be  purchased  separately,  and  has  minimum  0/S,  hardware  and  software  requirements.  Contact  your  local  Canon  imageWARE  dealer  for  details. 


Security  is  MCl’s  wholly  owned,  seamless  network,  which  offers  end-to-end  protection. 
Security  is  MCl’s  award-winning  Security  Operations  Center,  delivering  best-in-class  defense 
against  worms,  viruses  and  other  malicious  intrusions.* 

Security  is  MCl’s  proactive  audit  and  analysis  of  over  a  million  firewall  log  messages  per  day. 
Security  is  secure  with  today’s  MCI. 


MCI. 

www.mci.com 


'Based  on  2003  Security  Technology  Leadership  Awards — The  SANS  Institute. 
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■  8  Extreme  switch  loads  on  speeds,  feeds  and  management  features. 

■  8  Start-up  readies  Storage  controllers  with  a  twist. 

■  10  HP  looks  to  extend  utility  computing  options, 

■  10  Volo  attempts  to  lure  businesses  with  free  IP  PBX  software. 

■  12  Insider  threat  looms  large  In  information  warfare. 

■  14  Sun  alters  focus  with  introduction  of  low-end  blades, 

■  16  Computer  Associates  tackles  Web  services  management. 


Infrastructure 

■  19  Radware  switch  targets 
attacks. 

■  19  56K  modem  inventor  wants 
his  due. 

■  20  Kevin  Tolly:  Notes  from 
the  State  of  the  LAN  road. 

■  22  Special  Focus:  Wireless 
LANs  getting  priorities  straight. 

Enterprise 

Applications 

■  25  Database  gets  United  there 
on  time. 

■  25  Brightmail  looks  to  stand  out 
from  me-too  crowd, 

■  28  NetContinuum  boosts 
security  gateway. 

■  30  Scott  Bradner:  The 

real  meaning  of  CAN-SPAM. 

Service  Providers 

■  33  FCC  hears  different  view¬ 
points  regarding  future  regulation 
of  VoIP  services. 

■  33  First  week  of  wireless 
number  portability  proves 
underwhelming. 

■  34  Johna  Till  Johnson: 

Rating  your  service  provider. 


Technology  Update 

■  41  XML  appliances  speed  Web 
services. 

■  41  Steve  Blass:  Ask  Or. 

Internet. 

■  42  Mark  Gibbs:  Swiss  army 
knife  treats  for  tool  lovers. 

■  42  Keith  Shaw:  Cool  tools, 
gizmos  and  other  neat  stuff 

Opinions 

■  44  Editorial:  Catching  up 
with  the  Quovix  community. 

■  45  Jeff  Kaplan:  Preparing 
for  industry  inversion. 

■  45  Winn  Schwartau: 

Another  case  of  security  by  denial. 

■  74  BackSpin:  The  rise  and 
rise  of  scumware. 

■  74  'Net  Buzz:  Had  enough 
with  Plaxo  and  the  other  address- 
book  update  services? 

Management 

Strategies 

■  59  Managing  offshore  out¬ 
sourcing:  How  customers  plug  the 
culture  gaps  that  are  exposed  in 
sending  IT  work  overseas, 

■  67  Career  classifieds. 


NetWorker 

■  37  ExpertCity  tries 
to  change  its  image. 


Sharp's  SL-6000  is  aimed  at  the 
corporate  PDA  user  with  Java 
and  Linux  capability.  Page  42. 


WLAN  shakeout 

The  wireless  LAN  switch  start-ups  have  a  head  start,  but  the  wired  switch  vendors  are  serious  about  playing 
catch-up.  Look  for  a  major  shakeout  in  2004.  Page  47. 
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;  Survey:  Favorite  product  names 

j  Weird,  wild,  descriptive,  silly  —  the  network  industry  has  many  a  prod- 
j  uct  name  that  qualifies  for  all  of  those  descriptions.  Can  you  tel  a  bona 
!  fide  name  from  a  bogus  one?  DocFinder:  8825 

i  Cool  Yule  Tools 

;  Got  a  techie  on  your  list?  Head  online  to  search  through  more  than 
120  cool  products  in  our  holiday  gift  guide.  DocFinder:  8632 

I 

News  the  way  you  want  it 

I  Track  Just  the  technologies,  companies  and  authors  you're  interested  in. 

I  We've  now  got  more  than  60  different  RS8  feeds.  DocFinder:  7442 
I 

I  Seminars  and  events 

i  Is  your  data  center  fully  metered,  fully 
‘  accountable  and  fully  effective? 

Learn  the  latest  strategies  and  get  practical  applications  at  The  New 
Data  Center;  Powering  the  Enterprise,  a  new  Network  World 
Technology  Tour  event  for  professionals.  Free  to  qualified  registrants. 

DocFinder:  8542 


Breaking  News 

Exclusive  up-to-date  news  every  day.  DocFinder:  6342 

Free  e-mail  newsletters 

Sign  up  for  any  free  e-mail  newsletter,  DocFinder:  6343 


■  CONTACT  US  Network  World,  IISTurnpike  Road,  Southborough, 
MA  01772;  Phone:  (508)  460-3333;  Fax:  (508)  490-6438; 

E-mail:  nwnews@nww.com;  STAFF:  See  the  masthead  on  page  14 
for  more  contact  information.  REPRINTS:  (717)  399-1900 

SUBSCRIPTIONS/CHANGE  OF  ADDRESS:  Phone:  (508)  490-6444; 
Fax:  (508)  490-6400;  E-mail:  nwcirc@nww.com; 

URL:  www.subscribenw.com 


Review 

TELEWORK  TELEPHONY 


Nortel  leads  Lhe  way  in  voice-over-IP  applica¬ 
tions  that  support  teleworkers.  Page  53. 


Nortel's  collage  of  VoIP  wares  earned  the 
Network  World  Blue  Ribbon  award. 


Columnists 

Help  Desk 

More  Help  Desk  help  in  Fusion  forums 
Need  help?  Ron  Nutter,  our  Help  Desk  editor,  will  bo  in  our 
forums  trying  to  help  users  solve  their  problems.  We  don't 
have  a  Help  Desk  forum,  so  you'll  see  him  everywhere  from 
security  to  home  networking.  DocFinder;  8637 

Wireless  Wizards 

Are  PDAs  worse  clients  for  WLANs  than  notebooks? 

The  Wizards  help  Jim  in  Indiana,  who  says  his  company's  new 
PDAs  don't  seem  to  pick  up  signals  as  easily  as  the  old  laptops. 

DocFinder:  8827 

Telewcrk  Beat 

When  you  can't  work  from  home,  Part  2 
Net.Worker  Managing  Editor  Toni  Kistner  looks  at  TechSpace, 
which  offers  part-time  office  space  for  teleworkers  and  Wi-Fi  for 
drop-ins.  DocFinder.  8828 

Small  Business  Tech 

Mirra  Personal  Server  shines 

Columnist  James  Gaskin  says  Mirra  offers  a  unique  way  to  back 
up,  share  and  remotelyaccess  data.  DocFinder  8829 

Digital  Domicile 

It’s  Microsoft  in  2005 

Columnist  Ron  Miller  says  the  essentials  for  creating  the 
whole-home  network  will  be  built  into  the  Longhorn  operating 
system  DocFinder  8830 


What  is  DocTnuter? 

We’ve  made  it  easy  to  access  articles  and  resources 
online.  Simply  enter  the  four-digit  DocFinder  num¬ 
ber  in  the  search  box  on  the  home  page,  and  you'll 
jump  directly  to  the  requested  information. 
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■  atfk-  i  mmm  m  ■  ■■ 

Cisco  issues  patch  for  Aironet  vulnerability 

■  Cisco  is  warning  customers  using  its  Aironet  wireless  access 
points  about  a  security  vulnerability  that  could  let  attackers 
obtain  keys  used  to  secure  communications  on  wireless  net- 
works.The  vulnerability  affects  Aironet  1100, 1200  and  1400  series 
access  points  and  could  let  Wired  Equivalent  Privacy  keys  be  sent 
as  plain  text  over  corporate  networks  that  use  an  SNMP  server  and 
have  a  specific  option  enabled  on  the  access  point,  Cisco  says.To 
be  vulnerable,  organizations  have  to  be  using  an  affected  Aironet 
model  with  the  lOS  software,  have  an  SNMP  server  deployed,  be 
using  static  WEP  keys  for  encryption  and  have  enabled  an  option 
on  the  access  point  called  “snmp-server  enable  traps  wlan-wep.” 
That  option  is  disabled  by  default  on  Aironet  access  points,  Cisco 
says.  Cisco  has  issued  a  patch  for  vulnerable  versions  of  the  lOS 
software,  12.2(13)JA1. 

A  meeting  of  patch-management  minds 


TheGoodTIieBad  n  Ugly 


CieaiHip  time 

We  have  to  give  Wi-Fi 
specialist  logear  credit 
for  coming  up  with  a 
clever  marketing  pitch. 

The  company  has 
launched  a  contest  in 
search  of  "America’s 
most  cable-cluttered 
home  office." 

Contestants  need  to  send 
in  photos.  Five  winners  wi 
receive  an  logear  Wi-Fi 
valued  at  $289.  >► 

Linux's  turn,  a  serious  vulnerability  in  the  Linux  2.4  kernel  has  been 
discovered  that  gives  end  users  on  a  Linux  machine  unlimited  access  privileges, 
according  to  a  security  advisory  posted  by  developers  of  the  noncommercial  Debian 
Linux  distribution.  Patches  have  been  issued  for  a  number  of  Linux  distributions, 
including  Red  Hat,  Debian  and  Mandrake  Linux. 

Dealing  with  outsourcing.  Things  are  getting  awfully  testy.  The 
Indian  government  has  gone  on  the  offensive  regarding  the  contentious  issue  of  the 
loss  of  U.S.  and  European  jobs  to  India  because  of  outsourcing.  "It  is  in  the  interest 
of  the  Western  world  to  know  that  we  are  cheaper  and  better,"  said  Yashwant  Sinha, 
India’s  external  affairs  minister.  "It  is  our  strength.  The  world  has  to  recognize  it 
and  deal  with  it." 


■  Patching  is  such  a  headache  these  days  that  a  number  of  security  experts  have  got¬ 
ten  together  to  form  PatchManagement.org,  a  support  group  where  network  managers, 
systems  administrators  and  security  professionals  can  discuss  all  things  patching.  The 
discussion  list  will  focus  on  operating  systems,  applications  and  network  devices. The 
moderators  will  include  Eric  Schultze,  chief  security  architect  for  Shavlik  Technologies 
and  former  program  manager  for  the  Microsoft  Security  Response  Center;  Tina  Bird,  a 
member  of  the  Information  Security  team  at  Stanford  University;  Jason  Chan,  principal 
security  architect  for  ©stake;  and  Ben  Laurie,  director  of  the  Apache  Software 
Foundation. The  discussion  starts  at  www.patchmanagement.org. 

IBM  hands  privacy  standard  draft  to  W3G 

■  IBM  has  submitted  a  draft  of  its  Enterprise  Privacy  Authorization  Language  to  the 
World  Wide  Web  Consortium  to  develop.  IBM  is  turning  EPAL  over  to  the  W3C  in  the 
hope  that  it  will  be  turned  into  a  standard  that  will  help  automate  privacy  management 
tasks,  improve  consumer  trust  and  reduce  the  cost  of  privacy  compliance,  the  company 
said.  EPAL  is  a  programming  language  based  on  XML  that  will  let  software  developers 
build  security  policy  enforcement  features  directly  into  enterprise  software  applica¬ 
tions.  Using  EPAL,  personal  data  could  have  policies  attached  to  it  as  it  moves  from 
.^pplication  to  application  within  a  company.  IBM  introduced  EPAL  in  July  as  a  way  to 
move  beyond  user  identity-based  security.  Tlie  standard  builds  upon  existing  privacy 
specifications  such  as  the  Platform  for  Privacy  Preferences,  which  the  W3C  released  in 
April  2()02.The  W3C  said  the  organization  was“pleased  to  receive  the  EPAL  Submission” 
from  IBM. 
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2004  IT  spending  outlook  better,  IDG  says 

■  IDC  last  week  announced  its  annual  IT  predictions  for  the  coming  year,  and  accord¬ 
ing  to  the  research  firm’s  worldwide  analysis,  spending  will  increase  and  infrastructure 
will  evolve  to  better  support  business-driven  initiatives.  IDC  Senior  Vice  President  Frank 
Gens  said  IT  spending  would  grow  6%  to  8%,  up  from  previous  predictions  of  just  less 
than  5%.  Gens  said  enterprise  adoption  of  business-oriented  applications  and  the  need 
to  upgrade  hardware  after  a  three-year  drought  would  drive  the  upturii  in  IT  buying.“We 
could  be  in  for  a  refresh  of  3-year-old  or  older  IT  infrastructure  in  2004,”  he  said.“IT  orga¬ 
nizations  have  been  sitting  on  their  hands  for  years,  but  this  optimism  certainly  is  frag¬ 
ile  considering  the  last  few  years.”  Radio  frequency  identification  also  will  see  slower 
growth  than  previously  expected,  IDC  says. 

Voting  machine  maker  drops  lawsuit  threat 

■  In  a  move  hailed  as  a  victory  for  free  speech  advocates,  Diebold  Election  Systems  said 
last  week  that  it  wouldn’t  follow  up  on  its  threats  to  sue  those  who  published  informa¬ 
tion  that  indicated  flaws  in  the  company’s  electronic  voting  machines.  Diebold  declined 
to  give  specific  reasons  for  dropping  the  legal  threats.The  dispute  between  Diebold  and 
various  voter  rights  activists  arose  after  a  hacker  broke  into  a  Diebold  Web  server  in 
March  and  was  able  to  access  information  concerning  issues  with  Diebold  election 
equipment.  The  documents  indicated  flaws  in  the  touch-screen  voting  machines  and 
irregularities  with  certifying  the  machines  for  actual  elections  were  leaked  to  the  press 
in  August.  Diebold  used  the  controversial  Digital  Millennium  Copyright  Act  of  1998  to 
pressure  universities  and  ISPs  to  take  down  the  copies  of  its  internal  information. 


Putting  Linux  to  good  use 


Big  Mouth  Billy  Bass  in  Linux"  gives  step-by-step 
T''^?rion8  for  turning  that  silly  singing  fish  on  a  plaque 
tt,  a  silly  talking  fish  on  a  plaque.  Make  sure  to  watch 
''  irtovles  of  a  newly  revamped  bass  saying,  "I  did  not 
^  ::V3  sexual  relations  with  that  woman"  and  "I  am  not 
a  ct^?ok."  Read  more  fishy  tales  at 
u'u  It  , nu  fusion.com,  DocFinder:  8831. 


Homeland  Security  leaders  warn  of  regulation 

■  Top  officials  from  the  U.S.  Department  of  Homeland  Security  last  week  warned  mem¬ 
bers  of  the  high-tech  industry  that  unless  they  took  concrete  steps  toward  cybersecurity 
their  industry  could  face  government  regulation.“lt  should  go  without  saying  that  the  con¬ 
tinued  success  of  protecting  our  cyberspace  depends  on  the  continued  investment  of 
each  of  you  and  the  businesses  you  represent,"  said  Homeland  Security  Secretary  Tom 
Ridge,  addressing  the  National  Cyber  Security  Summit.  The  Department’s  Assistant  Sec¬ 
retary  for  Infrastructure  Protection  Bob  Liscouski  was  more  direct  on  the  need  for  indus¬ 
try  self-regulation: “You’ve  got  to  help  us  tell  that  story,  because  if  we  can’t  tell  that  story, 
there  are  a  lot  of  people  willing  to  legislate  how  you  should  be  doing  that  work." 
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Because  "ON"  is  the  only  option 


Availability  in  your  network  is  more  critical  than  ever, 
because  it's  not  if,  but  when  all  communication  such  as 
voice,  data,  and  video  will  digitally  converge  over  IP 
and  Ethernet. 

That  means  your  enterprise  network  must  be  carrier  class, 
with  self-healing  components  capable  of 
continuous  operation. 

That  also  means  you  need  to  eliminate  oil 
backdoor  passwords,  and  administration 
rights  must  be  restricted  based  on  the  skill  set  of  ^ 
the  administrator. 


Alcatel's  new  OmniSwitch  redefines  availability  for  the 
enterprise,  with  carrier-class  technology  that  delivers  next- 
generation  capabilities  right  now,  without  a  cost  premium. 

Alcatel  has  a  history  of  innovation  and 
proven  leadership,  and  has  been  building 
carrier  networks  around  the  world  for  over 
half  a  century. 

Carrier  class  is  a  distinction  you  have  to 
earn.  We've  earned  it  and  now  bring  it  to 
the  enterprise  with  the  next  generation 
OmniSwitch  family. 


Alcatel  builds 

carrier-class  networks 
for  the  enterprise 


www.alcatel.com/enterprise 

(800)  995-2612 
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Extreme  switch  hits  1 0G,  adds  mgmt 


Top  of  Extreme’s  line 


The  BlackDiamond  10K  backbone  switch  boasts  advances  in  hard¬ 
ware,  software  and  management  over  earlier  Extreme  devices. 


Hardware 

Eight  line-card  slots 
support  upto4810G 
ports,  480  Gigabit 
ports  or  a  mix;  40G 
bit/sec  of  bandwidth 
between  slots  and 
backplane. 


Extreme  BlackDiamond  10K 


Software 

An  open  source  Unix-based 
operating  system  replaces 
ExtremeWare;  services  and 
features  can  be  loaded  as 
modules  without  having  to 
upgrade  the  entire  operating 
system  or  take  the  switch  oifine. 
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Management 

XML-based  messaging  allows  more  efficient 
communication  among  switches;  XML  could 
also  be  used  in  switch-to-server  communi¬ 
cations  for  virtual  data  center  provisioning. 


□n 


■  BY  PHIL  HOCHMUTH 

Extreme  Networks  this  week  is 
expected  to  launch  Black¬ 
Diamond  lOK,  a  lOG  Ethernet 
LAN  switch  that  actually  runs  at 
lOG  bit/sec,  as  opposed  to  the 
company’s  previous  generation 
of  switches,  which  topped  out  at 
8G  bit/sec. 

The  company  also  is  claiming 
the  highest  lOG  density  in  the 
industry 

The  bandwidth  boo.st  also 
comes  with  major  changes  to  Ex¬ 
treme’s  switch  software  and  man¬ 
agement  architecture  At  the  heart 
of  the  switch  is  a  new  operating 
system  designed  to  give  Extreme 
based  networks  the  ability  to  stop 
attacks  and  even  execute  aute 
mated  switch-toserver  communi¬ 


cations  that  could  improve  effi¬ 
ciency  in  areas  such  as  voice-over- 
IP  and  virtual  data-center  provi¬ 
sioning,  Extreme  says. 

The  BlackDiamond  lOK  brings 
Extreme’s  core  switch  offering  up 
to  snuff  with  competitors  Cisco, 
Enterasys  Networks,  Force  10  Net¬ 
works  and  Foundry  Networks  — 
all  of  which  this  year  announced 
products  that  provide  non-block¬ 
ing  lOG  Ethernet  connectivity. 
Extreme’s  switch  is  an  eight-slot 
chassis  with  line  cards  available 
with  60  ports  of  lOOOBaseT  Ether¬ 
net  or  six  ports  of  lOG  Ethernet. 
The  box  can  handle  up  to  48  lOG 
ports  and  has  a  1 .6T  bit/sec  total 
switching  capacity 

The  BlackDiamond  lOK  is  what 
one  user  was  waiting  for. 

“1  was  getting  a  little  concerned 


about  what  was  going  on  at  Ex¬ 
treme  in  June,”  says  Robert 
Jacobs,  director  of  network  ser¬ 
vices  for  Phonoscope,  a  metro¬ 
politan  Ethernet  service  provider 
in  Houston.  “Cisco  had  its  [next- 
generation]  Catalyst  6509  out  at 
that  time,  while  Extreme’s  still 
wasn’t  out.” 

Phonoscope  uses  older  Ex¬ 
treme  BlackDiamond  switches  in 
its  core  network,  which  serves 
several  hundred  customers  with 
dark  fiber-based  Gigabit  Ethernet 
metropolitan-area  network  links. 
He  says  that  while  Extreme  had 
offered  lOG  Ethernet  on  the  old 
platform,  he  wasn’t  interested  in 
paying  lOG  prices  for  only  80%  of 
the  bandwidth. 

“Until  now,  it’s  been  cheaper  for 
me  to  light  single-Gigabit  fiber 
pairs  and  bond  the  links  togeth¬ 
er  to  make  backbone  trunks,” 
Jacobs  says. 

Phonoscope  will  install  four 
BlackDiamond  lOKs  this  month, 
and  will  replace  all  of  its  trunked 
4G  bit/sec  backbone  links  with 
lOG  bit/sec  Ethernet. 

The  BlackDiamond  lOK  comes 
with  a  new  operating  system 
called  Extreme  XOS.The  architec¬ 
ture  is  different  from  Extreme’s 
old  ExtremeWare  software,  or  any 
other  vendor’s  architecture,  in 
that  it  is  based  on  open  source 
Unix  software  that  resides  on  a 
flash  memory  card  and  runs  in 
RAM  on  the  switch’s  manage¬ 
ment  module. 

With  this  base  Unix  operating 
system,  Extreme  says  network  ser¬ 
vices,  protocols  and  features  — 
such  as  Rapid  Spanning  Tree, 
Multi-protocol  Label  Switching 
and  IPv6  —  can  be  installed  and 
deactivated  without  taking  down 
the  switch.  Because  these  ser¬ 
vices  run  as  separate  software 
modules  instead  of  being  part  of 
a  monolithic  piece  of  firmware 
code,  the  failure  of  one  module 
won’t  cause  the  entire  switch  to 
go  down.  Extreme  says. 

This  feature  also  appeals  to 
Phonoscope’s  Jacobs. 

“I’ve  always  thought  it  would  be 
nice  to  be  able  to,  say,  stop  this 
SNMP  service  or  start  up  that  rout¬ 
ing  service  or  upgrade  this  fea¬ 
ture  without  having  to  take  down 
the  entire  box,” Jacobs  says.“That’s 
something  all  vendors,  not  just 
Extreme,  have  been  lacking.” 

Another  feature  in  Extreme  XOS 
is  the  use  of  XML-based  messag¬ 
ing  for  switch-toswitch  or  switch- 
toserv'er  management  communi¬ 
cations.  Such  messages  could  in¬ 


clude  updates  on  network  securi¬ 
ty  policies  and  settings,  or  recon¬ 
figuration  of  virtual  LAN  (VLAN) 
and  quality-of-service  (QoS)  set¬ 
tings.  Extreme  says  this  method  of 
communication  could  replace 
scripting  methods  many  cus¬ 
tomers  use  for  executing  batch 
command  line  interface  tasks 
across  a  network. 

Extreme  says  XML  messaging 
also  could  be  used  to  better  inte¬ 
grate  LAN  switch  infrastructure 
with  other  devices  such  as  server 
farms,  load  balancers  and  IP 
PBXs.  In  the  trend  toward  a  virtu¬ 
alized  data-center  model  in 
which  servers,  applications  and 
storage  are  moved  and  config¬ 
ured  on  the  fly.  Extreme  XOS 
could  communicate  with  virtual¬ 
ization  management  systems  and 
reconfigure  switch  ports,  VLANs, 
QoS  settings  and  network  poli¬ 
cies  as  virtualized  data-center  re¬ 
sources  were  provisioned. 

Extreme  and  Avaya  are  working 
on  technology  that  will  let  XOS- 
based  switches  communicate 
network  status  information  to  an 
Avaya  IP  PBX  —  an  IP-based 
Linux  server  appliance.  This 
could  allow  the  Extreme  switch 
to  automatically  configure  QoS 
settings  for  voice  traffic.  The 
switch  also  would  be  able  to  noti¬ 
fy-  the  Avaya  IP  PBX  through  XML 


messaging  that  the  network  was 
congested  or  inaccessible,  in 
which  case  the  IP  PBX  could  then 
switch  to  a  secondary  IP  or  plain- 
old-telephone-service  network. 
Extreme  says  this  joint  offering 
will  be  available  next  year. 

Extreme  also  is  expanding  into 
intrusion  detection  with  XOS. 
The  company  says  in  the  near 
future,  corporations  will  be  able 
to  deploy  LAN  switches  that  can 
detect  malicious  traffic  patterns 
and  shut  down  or  squeeze  net¬ 
work  pipes  to  stop  the  spread  of 
attacks.  Currently,  Extreme 
switches  can  be  configured  to 
block  or  rate-limit  suspicious 
traffic  through  Layer  3  access 
control  lists  in  Extreme  switch 
hardware,  but  these  settings  must 
be  manually  turned  on  or  off. 

“Extreme’s  offering  isn’t  just 
about  having  the  fastest  10 
Gigabit  port,”  says  Max  Risi,  a 
research  analyst  with  IDC.  “It’s 
more  about  what  you  actually  do 
with  network  traffic,  and  how  to 
manage  it.” 

However,  he  says  with  these  ad¬ 
vanced  features  on  such  a  high- 
end  switch,  Extreme  could  be 
short-changing  its  midtier  cus¬ 
tomers  who  want  advanced 
management  and  security  but 
aren’t  ready  yet  for  gushing  lOG 
LAN  pipes.  ■ 


Start-up  readies 
storage  controllers 

■  BY  DENI  CONNOR 

Start-up  Maranti  Networks  this  week  will  launch  its  first  products,  a 
pair  of  storage  controllers  that  industry  watchers  say  can  run  applica¬ 
tions  much  faster  than  typical  Fibre  Channel  switches. 

The  company’s  128-port  director  level  and  16-port  remote^ite  con¬ 
trollers  are  designed  to  work  together  to  help  companies  better  man¬ 
age  their  storage  resources. 

The  twist  is  that  the  controllers  distribute  the  applications  across  all 
their  ports,  letting  programs  run  faster  than  if  they  were  on  one  con¬ 
troller  blade.  The  company  says  it  can  deliver  as  many  as  100,000  vir¬ 
tualized  I/O  operations  per  second  from  each  port.To  increase  perfor¬ 
mance,  the  controllers  use  cut-through  processing,  in  which  data  is 
processed  and  output  before  the  entire  packet  is  received. 

“Maranti  has  overall  the  most  powerful,  integrated  platform  for  deliv¬ 
ering  storage  services,”  says  Nancy  Marrone-Hurley  an  analyst  for  En¬ 
terprise  Storage  Group. 

Maranti’s  CoreStor  controllers  have  Gigabit  Ethernet,  iSCSI  and  Fibre 
Channel  ports,  which  let  them  connect  to  Ethernet  switches  or  Fibre 
Channel  SAN  s-witches.They  also  can  be  used  instead  of  Fibre  Channel 
switches. 

Redundant  management  modules  run  software  for  provisioning  stor¬ 
age  assets  based  on  policies. 

Tlie  controllers,  which  are  18U  and  3U  high,  are  rack-mountable,  fea¬ 
ture  hot-swappable  modules  and  boast  redundant  fans  and  power 
supplies. 

“Tlie  unique  deliverable  Maranti  has  is  director-level  replication,” says 
John  Clark,  storage  architect  for  a  large  online  publishing  company  in 
tfie  Midwest  that  is  using  Maranti  gear  to  replicate  data  between  two 
StoiageTek  BladeStore  arrays.“l  looked  at  Brocade  and  Cisco,  but  they 
are  doing  small  port  implementations  onl/ 

The  market  for  intelligent  switches  is  just  now  heating  up.  Cisco  and 
IBM  have  announced  that  IBM’s  SAN  Vblume  Controller  software  will 
run  on  ‘  Isco’s  MDS  9000  Series  switches;  Brocade  has  demonstrated  a 
virtual  tapt.>  application  running  on  its  Silkworm  Fabric  AP7420. 

Maranli’s  controllers  compete  with  products  from  these  vendors, and 
with  appliances  from  FalconStor  and  DataCorie. 

Maranti  is  evaluating  whether  to  create  a  256-port  controller. The  16- 
port  model, the  ■  ureStor  2000, starts  at  $35 ,000;  the  larger  CoreStor  3000 
starts  at  $350.0t’'  ■ 


Can  you  see  it? 


Middleware  is  Everywhere 


MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  software 
including  DB2,*  Lotus?  Rational^  Tivoli*  and  WebSphere*  that 
develops,  integrates  and  manages  your  applications  and 
systems.  Everything  is  efficient  and  seamless.  Across  the 
board.  Across  platforms.  Microsoft*  Oracle.  Sun.  You  name  it, 
IBM’s  flexible  open  middleware  can  connect  it  all.  It’s  instant 
business  benefit.  Instant  customer  satisfaction.  On  demand, 
(©business  on  demancl  “at  lbm.com/software/integrate 


1.  Instantly  admitting  patient. 

2.  Immediately  processing  claim. 

3.  Automatically  approving  procedure. 

4.  Constantly  tracking  treatment. 

5.  Directly  assessing  costs. 


Middleware 
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Volo  lures  businesses  with  free  IP  PBXs 

Start-up  tries  to  remove  barrier  to  voice  over  IP. 


■  BY  TIM  GREENE 

Volo  Communications  wants 
businesses  to  sign  up  for  its 
IP  voice  services  so  badly  that 
it  plans  to  give  away  IP  PBX 
software. 

Starting  in  January,  the  2-year- 
old  company  will  provide  IP  PBX 
software  at  no  cost  to  support 
about  100  users  if  corporations 
agree  to  buy  IP  voice  services 
from  Volo’s  service  provider  cus¬ 
tomers.  IP  PBXs  for  100  users  can 
range  from  $3,000  to  $7,000. 

The  freebie  software  will 
reduce  a  hurdle  businesses  face 
when  considering  voice  over  IP 
(VoIP)  —  investing  large  sums  in 
their  own  gear  to  convert  TDM 
voice  to  IP  so  it  can  be  fed  onto 
an  IP  link  to  the  carrier,  says 
Shawn  Lewis,  Volo’s  CEO  and 
founder.  Competitors  such  as 
Packets  and  Vonage  require  cus¬ 
tomers  to  pay  for  their  own  IP 
PBX  or  voice  gateways. 

This  week  Galaxy  Internet  Ser¬ 
vices,  a  regional  ISP  in  Newton, 


Mass.,  plans  to  roll  out  a  VoIP 
offering  based  on  Volo’s  services, 
says  Galaxy  CEO  Bob  Carp.  Gal¬ 
axy  will  charge  $34.95  per  line, 
per  month,  for  the  service,  called 
Galaxy  Voice.This  buys  1,000  min¬ 
utes  of  local  or  long-distance  and 
a  service  bundle  including  voice 
mail,  call  forwarding,  repeat  dial¬ 
ing,  call  transfer  and  caller  ID 
blocking.  Extra  minutes  cost  1.9 
cents.  Residential  customers  pay 
$19.95  per  month. 

Lewis  says  that  besides  Galaxy 
Volo  has  deals  with  14  other  ISPs 
and  a  large  carrier  he  cannot 
name. 

Part  of  Volo’s  attraction  is  that 
Galaxy  needs  to  lay  out  no  money 
for  softswitches,  service  platforms 
and  billing  systems.  Carp  says. 
“The  margins  are  so  thin  on 
[VoIP]  that  unless  you  have 
tremendous  volumes,  it’s  difficult 
to  recapture  your  investment.” 

Galaxy  routes  voice  traffic  into 
Volo’s  network,  and  Volo  sorts  it 
and  sees  that  it  is  delivered  to  the 
party  being  called  —  whether 


■ 

“  VOLO 

COMMUNICATIONS 

Location:  Altamonte 
Springs,  Fla. 

Founder:  CEO  Shawn 

Lewis 

Service:  Voice-over-IP  sup¬ 
port  for  service  providers. 

Financing:  Private 

Competitors:  Vonage, 
Net2Phone,  Packets. 

Employees:  42 

Fun  fact:  Lewis’  last 
business  venture  was 
running  a  string  of  night¬ 
clubs  in  South  Beach,  Fla. 

that  party’s  phone  is  connected 
to  an  IP  network  or  to  the  tradi¬ 
tional  public  phone  network.  It 
also  resolves  billing  with  other 
carriers. 

Volo’s  technology  is  based  on 
software  developed  by  sister 
companies  Caerus  Networks  and 


Caerus  Billing  and  Mediation, 
which  are  all  subsidiaries  of  a 
holding  company  called  Caerus 
(pronounced  KER-iss), named  for 
the  Greek  god  of  opportunity  The 
businesses  are  privately  funded 
and  based  in  Altamonte  Springs, 
Fla.,  near  Orlando. 

A  well-known  character  in  tech¬ 
nology  circles,  Lewis  is  embark¬ 
ing  on  his  second  IP  telephony 
start-up.  In  1995  he  founded 
XCOM,  a  regional  carrier  that 
developed  what  was  arguably  the 
first  Softswitch,  based  on  software 
Lewis  wrote  and  hardware  made 
by  Ascend.  After  Level  3 
Communications  bought  XCOM 
in  a  $168  million  stock  deal  in 
1998,  Lewis  moved  to  South 
Beach,  Fla.,  where  he  lived  the 
high-profile  good  life,  buying  up 
nightclubs  and  suffering  a  highly 
publicized  romantic  breakup 
with  an  NFL  cheerleader. 

Two  years  ago  he  started  devel¬ 
oping  the  software  needed  to 
run  Volo’s  infrastructure  and  ear¬ 
lier  this  year  started  trialing  it 


with  ISPs. 

Other  IP  phone  providers  also 
wholesale  to  ISPs,  using  the  ISPs 
as  a  way  to  market  to  consumers 
and  businesses.  Galaxy’s  Carp 
says  he  considered  reselling  ser¬ 
vices  from  Vonage,  Net2Phone 
and  Packets,  but  chose  Volo  in 
part  because  of  his  respect  for 
Lewis.  “He’s  not  only  a  technical 
guru,  he’s  a  very  shrewd  business¬ 
man,”  he  says. 

But  Volo  also  offers  access  to  its 
service  creation  platform  that  lets 
its  ISP  customers  develop  their 
own  services.  Carp  says.  For  exam¬ 
ple,  a  service  could  pull  together 
call  waiting  with  a  database  asso¬ 
ciating  a  number  with  a  name 
and  a  voice  announcement.  So 
when  customers  are  on  the 
phone  when  a  call  comes  in,  they 
hear  the  name  of  the  person  call¬ 
ing  rather  than  a  tone. 

If  Volo  doesn’t  have  the  soft¬ 
ware  objects  needed  to  create  a 
service,  customers  can  write 
their  own.“lt’s  an  open  platform,” 
Lewis  says.  ■ 


HP  looks  to  extend  utility  computing  options 


The  HP  Thin  Client  appliance  sits  on  the  user's  desk.  A  conventional  moni¬ 
tor,  keyboard  and  mouse  connect  to  the  appliance,  which  in  turn  connects 
to  the  HP  blade  PC  processor  in  the  data  center. 


■  BY  DENI  CONNOR 

HP  last  week  moved  to  add  meat  to  the  bones  of 
its  utility  computing  framework  through  new  capa¬ 
bilities  for  servers  and  desktop  blades  that  the 
company  says  will  make  it  easier  for  IT  managers 
to  adjust  computing  resources  as  user  demand 
fluctuates. 

Among  the  introductions  were: 

•  Tlie  ability  for  customers  to  pay  only  for  proces¬ 
sors  they  use  on  HP  Integrity  Superdome  and 
Itanium-based  rx8620  and  rx7620  servers. 

•  A  desktop  blade  located  in  the  data  center  that 
connects  to  a  client  appliance,  monitor,  keyboard 
and  mouse  on  the  user’s  desktop. This  configuration 
replaces  a  traditional  desktop  PC. 

•  Tlie  ability  to  span  Oracle  applications,  data¬ 
bases.  servers  and  storage  between  remote  data 
centers. 

•  The  ability  to  automatically  move  HP  Instant 
Capacity  On  Demand  licenses  among  hardware 
partitions  for  HP-UX  servers. 

Analysts  say  these  capabilities  are  important  in 
establishing  a  utility  computing  model  in  which  cus¬ 
tomers  pay  for  only  the  capacity  or  resources  they  use. 

“Almost  everywhere,  IT  managers  are  under  orders  to 
not  only  prove  total  cost  of  ownership  and  return  on 
investment,  but  to  save  money  wherever  they  can,”  says 
John  .Madden,  practice  director  for  Summit  Strategies. 
“In  addition, corixirate  customers  are  really  eager  to  get 
a  better  handle  on  managing  and  maintaining  their  IT 
systems.’ 

In  1  IP’s  pay-|X"r-use  program, customers  pay  for  the  num¬ 


ber  of  server  processors  they  use.  With  its  two-  to  16- 
processor  Integrity  rx8620  server,  if  customers  use  more 
processors  to  keep  up  with  the  demand  created  by  sea¬ 
sonal  holiday  traffic,  they  will  be  charged  for  that 
increased  use.  When  traffic  falls  off,  their  bills  will 
decrease. 

“We  are  using  (pay  per  use]  on  one  of  our  systems  that 
has  our  largest  corporate  application  and  database,” 
says  Kim  Norbyvice  president  of  IS  for  Wells'  Dairy  in  Le 
Mars,  Iowa.  Norby  uses  pay  per  use  on  HP’s  rp8400  HP- 


UX  server.“We  use  a  second  rp8400  for  failover  and 
disaster  recovery.  The  pay  per  use  is  very  advanta¬ 
geous  on  that  system  since  it  is  idle  a  lot  of  the 
time  and  its  usage  is  fairly  low,”  he  says. 

With  its  desktop  blades,  HP  expects  to  extend  the 
same  data  center  virtualization  anti  consolidation  of 
computing  resources  that  it  does  with  its  blade 
servers.  The  HP  Consolidated  Client  Infrastructure 
consists  of  a  desktop  blade  processor  called  the  HP 
blade  PC,which  runs  Windows  XP  Professional  and  is 
located  in  the  data  center.This  processor  connects  to 
an  appliance  on  the  user’s  desk  called  the  HP  Thin 
Client.  A  monitor,  keyboard  and  mouse  connect  to 
the  appliance,  letting  users  access  applications  in  the 
data  center. 

HP  also  allows  the  virtualization  of  Oracle9i  Real 
Application  Clusters  for  disaster  recovery  and  easier 
management.These  clusters  can  be  located  as  far  as 
62  miles  apart.  With  this  virtualization,  data  resides, 
and  is  accessed, at  both  locations  simultaneously 
Further,  the  company’s  Instant  Capacity  on 
Demand  (iCOD)  program,  which  lets  customers  pay 
for  processors  only  when  they  start  using  them,  has 
been  extended  to  HP-UX  servers  that  use  hardware  parti¬ 
tioning.  It  lets  iCOD  licenses  be  automatically  shifted 
among  partitions  as  demand  changes  or  as  new  parti¬ 
tions  are  created. 

The  pay-per-use  program  for  Superdome  and  Itanium 
servers  is  expected  to  be  available  next  month.  The  HP 
Thin  Client,  HP  blade  PC,  network  storage,  training  and 
support  start  at  less  than  $  1 ,500  per  desktop. The  blade  PC 
itself  costs  $799.  It  is  expected  to  be  available  in  the  first 
quarter  of  2004.  ■ 
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Can  you  see  it? 


Middleware  is  Everywhere 
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MIDDLEWARE  IS  IBM  SOFTWARE.  Software  like  IBM 
DB2  Content  Manager.  A  complete  and  open  solution  that 
easily  manages  and  leverages  information  from  almost 
anywhere.  Even  content  like  video  and  scanned  images  is 
easily  and  securely  accessed.  It's  how  responsiveness 
increases,  productivity  soars  and  knowledge  becomes  power, 
(©business  on  demand”  Go  to  ibm.com/db2/middleware 


1.  Verifies  insurance  on  the  spot. 

2.  Files  digital  claim  in  an  instant. 

3.  Approves  estimate  at  the  site. 

4.  Orders  new  bumper  at  the  scene, 

5.  Receives  settlement  in  a  snap. 
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Security  experts: 
insider  threat 
looms  largest 

■  BY  ELLEN  MESSMER 
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WASHINGTON,  D.C. — While  the  U.S.  military  is  building  up  defenses 
to  fend  off  network-based  attacks  from  enemy  states  and  terrorists, 
some  say  the  more-insidious  security  problem  is  the  threat  of  an  insid¬ 
er  bent  on  .sabotage  or  stealing  data. 

At  last  week’s  Forum  on  Infor¬ 
mation  Warfare,  researchers  from 
the  FBI  and  George  Washington 
University  emphasized  the  insider 
threat  during  presentations  that 
drew  military  personnel  and  aca¬ 
demics  from  around  the  world.  In 
particular,  IT  systems  administra¬ 
tors  increasingly  are  seen  as  the 
most  potentially  dangerous  insid¬ 
er  threat  —  and  military  concern 
—  because  of  their  power  over 
networks. 

In  his  keynote  speech,  Lt.  Gen. 

Kenneth  Minihan,  former  head  of 
the  National  Security  Agency 
(NSA),  compared  today’s  systems 
administrators  to  the  encryption- 
code  clerks  of  past  wars  who 
broke  enemy  secrets.  He  said  sys¬ 
tems  administrators  deserve 
greater  attention  from  the  military 
and  should  be  better  paid.  Some 
researchers  say  they  have  seen 
the  systems  administrator  go  bad 
and  see  it  as  the  Achilles’  heel  of  national  defense. 

FBI  and  George  Washington  researchers  have  studied  the  case  histo¬ 
ries  of  criminal  computers  use,  including  interviews  with  prisoners. 

“The  systems  administrator  responsible  for  designing  computer  sys¬ 
tems  has  the  extraordinary  ability  to  do  damage’’ said  Jerrold  Post,pro- 
fes.sor  of  psychiatry,  political  psychology  and  international  affairs  at 
George  Washington.  He  cited  cases  that  occurred  at  Fort  Bragg  in  North 
Carolina,  and  in  banking  and  other  industries,  to  underscore  the  dan¬ 
ger  posed  by  IT  insiders  who  exploit  power  over  networks. 

fost  noted  that  insiders  who  commit  computer-based  crimes,  such  as 
fraud,  extortion, sabotage  and  espionage,  have  a  variety  of  motivations, 
including  revenge  and  financial  gain.  He  said  it  is  critical  to  understand 
the  psychology  of  IT  administrators  in  general  to  recognize  possible 
danger  signs. 

IT  .specialists  are  “overwhelmingly  represented  by  introverts”  who 
“internalize  stress  and  express  themselves  only  online,”  he  said.  A 
.study  of  IT  specialists  caught  for  computer-based  crimes  reveals  them 

See  Information  warfare,  page  72 


Likely  to  be  seen  in  an 
insider  threat: 

Introvert;  lives  online. 

History  of  significant 
frustrations  relating  to 
family,  peers,  co-workers. 

S'  Divorce  or  romantic 
discord. 

«  Propensity  for  anger 
toward  authority. 

Grandiosity  covers 
fragile  ego. 

^  Extreme  attachment  to  IT 
infrastructure. 

SOURCE;  GEORGE  WASHINGTON  UNIVERSITY 
POLITICAL  PSYCHOLOGY  PROGRAM 


NewsOsilerts 

Hate  hunting  for  stories  on  a  specific  topic?  Let  the  news 
come  to  you  with  Network  World’s  latest  news  alerts  — 
with  focuses  on  security,  financials,  standards,  trade 
show  news  and  vendor-specific  news. 

Sign  up  today  at 
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Avaya  broadens  its  menu 

Among  the  new  Avaya  VoIP  offerings  on  tap  this  week  are: 


Avaya  Communications  Manager  2.0  software  for  all  Avaya  IP  PBXs. 

New  features  include:  AES  encryption  of  voice  and  signaling  traffic, 
Enhanced  911  support,  support  for  cell  phones. 

Avaya  Modular  Messaging  1.1,  a  unified  voice  server  platform. 

Combines  both  Avaya  Intuity,  Audix  and  Octel  voice  mail  platforms 
with  its  Unified  Messenger  interface  for  Microsoft  Exchange  and 
IBM  Lotus  Domino. 

S8500  Media  Server  -  $600 

A  Linux  server-based  IP  PBX  for  midsize  to  large  companies  with 
up  to  3,200  IP  or  digital  lines.  Can  support  up  to  250  remote-office 
Avaya  Media  Gateways  (existing  G700  or  new  G350). 

Avaya  0350  Media  Gateway  -  $2,800 

A  small-/branch-office  device  that  includes  a  VoIP  gateway,  an  IP 
WAN  router  and  a  48-port  power-over-Ethernet  LAN  switch  that 
can  support  IP  or  digital  phones.  Also  can  be  installed  with  a  back¬ 
up  local  call  processor  ($3,000  extra). 

I _  ■ 


Avaya 

continued  from  page  1 

•  The  S8500  Media  Server,  a 
Linux-based  call  processor  that 
supports  up  to  3,200  phones. 

•  Communications  Manager 
2.0,  an  upgrade  of  Avaya’s  IP  PBX 
operating  system,  with  improve¬ 
ments  in  encryption,  Enhanced- 
911  support,  and  features  for 
extending  PBX  functionality  to 
cell  phone  users. 

•  Avaya  Modular  Messaging  1.1, 
a  unified  voice  server  that  com¬ 
bines  Avaya’s  two  voice  mail 
servers  with  its  Unified 
Messenger  interface  for  Microsoft 
Exchange  and  IBM  Lotus 
Domino. 

•  The  G350  Media  Gateway  a 
branch  office  device  that  com¬ 
bines  voice  over  IP  (VoIP)  con¬ 
nectivity  LAN  switching  and  WAN 
routing  into  one  box  that  sup¬ 
ports  40  lines. 

“The  [S8500]  fills  a  very  large 
gap  in  Avaya’s  Media  Server  prod¬ 
uct  line,”  says  Brian  Riggs,  a 
research  director  with  Current 
Analysis.  He  says  Avaya’s  S8300 
Media  Server  supports  up  to  500 
users,  but  the  next  jump  was  to 
the  S8700,  which  maxes  out  at 
36,000  endpoints  and  starts  at 
$20,000.  The  $6,000  S8500  is  an 
interim  step  between  the  two. 

Charter  Steel  of  Saukville,  Wis., 
recently  installed  S8500  Media 
Servers  and  Communications 
Manager  2.0  at  two  offices  in  an 
eight-site  WAN,  which  includes 
TDM-  and  IP-based  PBXs  from 
Avaya  and  1,100  phones.  The 
S8500s  connect  to  Avaya  Definity 
PBXs  and  G700  Media  Gateways 
throughout  the  network,  provid¬ 
ing  for  a  single,  company-wide 
dial-plan  and  directory 

Charter  went  with  the  S8500s 
because  it  needed  to  add  more 
users  at  two  sites  but  didn’t  want 
to  expand  its  existing  Definity 
switches.  That  would  have 
required  buying  expansion  cabi¬ 
nets  that  probably  never  would 
be  used  to  capacity  says  telecom 
supervisor  Peter  Schwei. 

“This  lets  us  mix  and  match  IP 
and  digital  handsets”  and  add 
phones  on  a  per-user  basis, 
Schwei  says.  The  new  licensing 
scheme  for  Communications 
Manager  2.0  —  the  software  that 
runs  on  the  S8500  —  lets  Schwei 
add  users  incrementally  at  a  fixed 
price  without  having  to  buy 
expansion  cards  that  have  more 
ports  than  he  has  phones. 

Among  the  new  features  in 
Communications  Manager  2.0  is 
support  for  Advanced  Encryption 
Standard  (AES).  The  128-bit  AES 
improves  on  Avaya’s  current,  pro¬ 


prietary  102-bit  VoIP  encryption 
used  to  secure  IP  voice  signaling 
and  IP  voice  traffic.  AES  also  will 
let  Avaya’s  products  interoperate 
better  with  other  AES-based  secu¬ 
rity  products,  such  as  firewalls 
and  VPN  gear,  the  company  says. 

Communications  Manager  2.0 
also  includes  support  for 
Enhanced-911.This  lets  911  calls 
placed  from  an  Avaya  IP  or  TDM 
phone  be  traced  to  the  physical 
location  of  the  phone,  down  to 
the  floor,  department  or  cubicle. 

Licensing  shift 

The  licensing  twist  with  Com¬ 
munications  Manager  2.0,  ana¬ 
lysts  say  is  it  is  based  on  end  users 
instead  of  ports  and  is  a  major 
shift  from  Avaya’s  per-port  licens¬ 
ing  practice. 

Avaya  now  charges  $300  per 
user  for  multi-site  Communica¬ 
tions  Manager  deployments, 
where  a  centralized  IP  PBX  man¬ 
ages  IP  and  TDM  phones  across  a 
WAN.  The  per-use  cost  of  single¬ 
site  enterprise  licenses,  with  no 
WAN  trunking,  is  $200. 

These  prices  are  the  same  for 
Communications  Manager  2.0 
across  all  hardware  platforms, 
whereas  Avaya  used  to  charge 
different  per-port  prices  de¬ 
pending  on  various  hardware 
configurations. 

“Avaya  is  shifting  the  price  of  its 
hardware  —  cabinets,  boards  and 
processors  —  to  software,”  says 
Allen  Sulkin,an  analyst  withTEQ- 
Consult  Group.  “This  way,  hard¬ 
ware  prices  are  much  lower  than 
buying  traditional  Definity  gear, 
but  the  per-line  licensing  is  much 
higherr 

Sulkin  says  the  move  to  stan- 
dards-based  processors  and  oper¬ 
ating  systems,  such  as  Intel  and 
Linux,  with  IP  as  the  transport, are 


fueling  this  change. 

“Eventually  Avaya  may  not  sell 
you  any  hardware  at  all,”  Sulkin 
says.  “You  could  buy  your  own 
server,  just  load  [Communica¬ 
tions  Manager]  on  there,  and  get 
[Session  Initiation  Protocol] 
phones  from  Radio  Shack.” 

Current  Analysis’  Riggs  sees  the 
new  pricing  structure  as  a  bene¬ 
fit  for  users.  “This  is  much  sim¬ 
pler,  which  should  help  Avaya’s 
sales,”  he  says.  Riggs  says  when 
shopping  for  Voip  most  datacom 
executives  —  likely  more  famil¬ 
iar  with  per-user  software  licens¬ 
ing  —  probably  didn’t  under¬ 
stand  Avaya’s  telecom-centric 
pricing  with  different  fees  for 
TDM  and  IP  stations. 

With  a  clearer-cut  IP  licensing 
scheme  and  Avaya’s  IP  portfolio 
filled  out,  analysts  also  see  its 
moves  as  the  beginning  of  the 
end  for  Definity 

“Within  the  next  year,  they’ll 
probably  begin  to  end-of-sale 
[Definity], starting  with  the  mid¬ 
size  models,”  Sulkin  says.  “There’s 
a  difference  between  selling  and 
marketing  [the  Definity  systems]. 
They  may  still  have  Definity  hard¬ 
ware  available,  but  they  aren’t 
marketing  it.” 

While  Avaya  says  it  will  continue 
to  sell  and  support  Definity  hard¬ 
ware  —  including  processors, 
telecom  cabinets  and  digital 
cards  —  the  company  says  it  is 
de-emphasizing  the  products. 

“You  can  still  buy  Definityf  says 
Lawrence  Byrd,  an  Avaya  vice 
president  and  convergence  strate 
gist.“We  have  no  immediate  plans 
to  stop  selling  Definity.  But  we  feel 
[customers]  get  more  value  out 
of  our  IP-based  systems."  ■ 
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Middleware  is  Everywhere 


M I D  D  LE  WAR  E  is  what  on  demand  ■mi'IIMH 
business  demands.  And  middleware  is 
software  like  IBM  WebSphere*Using  an  open  and  scalable 
foundation,  WebSphere  lets  you  swiftly  respond  to  change. 
Applications  are  easily  updated,  tested  and  deployed. 
Lead  time  is  shortened.  And  everything  clicks,  regardless  of 
platform.  WebSphere  delivers  it  all.  On  the  money.  On  demand. 
(@ business  on  demand™at  ibm.com/websphere/middleware 


1.  New  design  already  tested. 

2.  Suppliers  already  linked. 

3.  Procurement  already  automated 

4.  Blueprints  already  updated. 

5.  Engine  all  ready  for  takeoff. 


WebSphere 
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Sun  alters  focus  with  low«nd  blades 


Company’s  attempt  to  grab  market 

■  BY  JENNIFER  MEARS 

Sun  might  be  best  known  for  its  high-end  boxes,  but 
for  the  past  year  or  so  it  has  stressed  its  commitment 
to  the  low-end  server  market.  The  company  used  its 
quarterly  product  rollout  last  week  to  announce  that 
it  is  filling  out  its  low-cost  line. 

Among  the  new  products  is  Sun’s  first  x86  blade,  the 
Sun  Fire  BlOOx.The  one-processor  blade,  powered  by 
Advanced  Micro  Devices’  (AMD)  1.53-GHz  Mobile 
Athlon  XP  1800-1-  chip,  comes  with  IG  or  2G  bytes  of 
memory  and  supports  Linux  or  Solaris.  It  starts  at 
$1,800. 

The  BlOOx  is  designed  to  coexist  with  Sun’s  other 
compute  blade,  the  UltraSPARC-based  B 100,  as  well 
as  the  BlOn  load-balancing  blade  and  the  new  BlOp 
SSL  Proxy  blade,  which  offloads  processor-intensive 
Secure  Sockets  Layer  encryption  and  decryption.The 
B1  Op,  announced  last  week,  starts  at  $13,800. 

All  four  blades  fit  into  Sun's  3U-high  chassis,  which 
has  slots  for  16  blades.  The  idea  is  to  let  customers 
run  Linux  or  Solaris  on  SPARC  or  x86. 

Sun  is  focusing  on  the  low  end  as  it  attempts  to  offset  a  drop  in  spend¬ 
ing  on  its  flagship  Unix  systems.  According  to  lDC,the  Unix  server  mar¬ 
ket  shrunk  by  3.8%  in  the  third  quarter  compared  with  the  same  peri¬ 
od  a  year  ago,  while  revenue  from  x86-based  servers  —  those  running 
on  Intel  and  AMD  chips  —  grew  8.3%. 


Sun  was  hardest  hit  by  the  drop  in  Unix  spending. 
It  was  the  only  major  vendor  to  lose  market  share, 
dropping  9.3%  compared  with  the  same  quarter  a 
year  ago,  while  the  overall  server  market  rose  2%. 

Analysts  say  Sun  is  smart  to  increase  its  focus  on 
low-end  systems.  Sun  underscored  that  commitment 
at  Comdex  last  month  when  it  announced  a  far- 
reaching  partnership  with  AMD  to  roll  out  systems 
based  on  that  company’s  32-/64-bit  Opteron  chips. 

Sun  says  customers  can  expect  the  company’s  first 
Opteron  product,  a  two-processor  box,  to  be  available 
in  the  first  quarter.  A  four-processor  Opteron  server  is 
slated  for  release  in  the  second  quarter. 

Sun  stressed  that  it  is  not  moving  away  from  its  Intel 
offerings,  announcing  that  it  was  upgrading  the  Sun 
Fire  V65x  and  V60x  servers  that  it  introduced  earlier 
this  year  with  new  3.2-GHz  Xeon  processors. 

“The  scope  of  their  announcements  and  plans  are 
quite  broad  with  respect  to  x86  and  SPARC,”  says 
Gordon  Haff,an  analyst  at  Illuminata.“Whether  it’s  too 
late  remains  to  be  seen.  At  the  very  least  it’s  going  to 
take  a  clear  and  unwavering  focus  that’s  been  missing  in  the  past  when 
it  comes  to  initiatives  outside  their  SPARC/Solaris  comfort  zone.” 

Clark  Masters,  executive  vice  president  for  enterprise  systems  prod¬ 
ucts  at  Sun,  conceded  that  the  company  was  slow  to  address  the  low 
end  of  the  market. “It’s  fair  to  say  that  we  were  in  denial  of  the  32-bit 
computing  world  and  what  it  can  do,”  he  says.  ■ 


share  is  intended  to  offset  drop  in  Unix  spending. 


The  single-processor  Sun  Fire 
BlOOx,  which  supports  Solaris  and 
Linux,  is  powered  by  AMD's  Mobile 
Athlon  XP  1800-)- chip. 


Beanies 

continued  from  page  1 

been  incorporated  into  the 
names  of  everything  from  soft¬ 
ware  companies  to  alternative 
music  bands. 

Interstellar  Propeller,  which 
employs  from  five  to  10  people 
—  depending  on  the  season  — 
claims  to  be  the  leading  maker  of 
these  lids,  having  spun  out  1.5 
million  over  27  years.Tlie  compa¬ 
ny,  which  says  it  is  “changing  the 
way  America  flies,”  sells  its  hats 
through  a  slew  of  outlets,  from 
CompUSA  to  theme  parks  to  sci¬ 
ence  museums  to  shopping-mall 
carts  to, of  course,  high-tech  com¬ 
panies.  Interstellar  awarded  Bill 
Gates  a  golden  propellered  hat  in 
the  mid-1990s,  and  more  recently, 
bask(‘tball  stars  Shaquille  O’Neal 
and  Hakeem  Olajuwon  sported 
the  twirly  caps  in  a  TV  ad  Spike 
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Lee  produced  for  a  fast  food 
restaurant. 

The  company  got  its  start  in 
1976  shortly  after  Samuels  con¬ 
cocted  a  propeller  beanie  as  a 
birthday  gift  for  Wavy  Gravy  who 
made  a  name  for  himself  in  the 
1960s  as  a  political  and  social 
activist,  and  more  recently  as  the 
namesake  for  a  discontinued 
Ben  &  Jerry’s  ice  cream  flavor. 

“People  really  reacted  to  the 
hat,  so  I  got  into  the  business  of 
making  and  selling  them,”  says 
Samuels,  who  is  hard  to  miss  at 
Oakland  As  baseball  games  and 
San  Francisco  49ers  football 
games,  what  with  his  long  beard, 
superhero  cape,  banjo  and  pro¬ 
peller  beanie. 

“When  the  software  industry 
came  along,  that’s  when  I  knew  I 
was  living  right,”  he  says. 

Science  fiction  writer  Ray 
Faraday  Nelson  is  said  to  have 
created  the  propeller  beanie  in 
1947  at  a  small  science  fiction 
convention  in  Cadillac,Mich.,and 
homemade  versions  began  pop¬ 
ping  up  among  the  sci-fi  crowd, 
fueled  in  part  by  cartoons  Nelson 
crafted  that  included  propeller 
beanie-wearing  characters. 

“Computer  fans,  as  the  Internet 
developed,  were  often  also  sci¬ 
ence  fiction  fans,  so  they  carried 
the  practice  of  wearing  this 
headgear  over  into  this  new 
domain,  making  it  part  of  so- 
called  geek  culture,”  Nelson  says. 


Among  the  sci-fi  fans  enamored 
with  the  early  propeller  beanie 
images  was  a  young  Bob 
Clampett,  who  went  on  to 
become  a  pioneer  in  American 
animation,  designing  Pbrky  Pig 
and  other  famous  characters. 
After  a  successful  career  at 
Warner  Bros., Clampett  struck  out 
on  his  own  in  the  1940s  and  cre¬ 
ated  a  TV  puppet  show  called 
“Time  for  Beany”  that  featured  the 
adventures  of  a  seasick  sea  mon¬ 
ster  named  Cecil  and  his  pro¬ 
peller-hat-wearing  buddy  Beany 
The  Emmy-award-winning  pup¬ 
pet  show  morphed  into  a  popular 
cartoon  in  the  early  1960s  and 
helped  popularize  the  propeller 
beanie  among  children.  Show 
sponsor  Mattel  began  selling  a 
now-collectible  toy  called  the 
Beany  Copter. 

The  propeller  beanie,  which 
typically  sells  for  about  $12,  has 
been  refined  over  the  years. 
Jerome  Lemelson,  who  held 
more  than  550  patents,  was 
awarded  his  first  patent  in  1953 
for  a  variation  of  the  propeller 
beanie  that  enabled  the  wearer  to 
blow  through  a  tube  to  make  an 
item  atop  the  hat  spin  or  move. 
Models  today  include  brimmed 
(the  current  hot  style,  according 
to  Samuels)  and  traditional  brim¬ 
less,  those  with  glow-in-the-dark 
propellers  as  well  as  those  for 
skiers  and  cyclists. 

Among  current  beanie  pro¬ 


peller  buyers  is  Sherpa  Software,  a 
maker  of  e-mail  and  data  man¬ 
agement  software  that  will  hand 
out  about  a  thousand  beanies 
sporting  its  logo  this  year,  typically 
at  trade  shows  such  as  Lotus- 
phere  and  Microsoft’s  Tech  Ed. 
Employees  and  customers  have 
taken  to  the  hats,  collecting  differ¬ 
ent  models  issued  yearly 

‘At  one  point  [at  Tech  Ed]  a  gen¬ 
tleman  got  down  on  his  hands 
and  knees  and  said, ‘Just  tell  me 
what  1  have  to  do  to  get  one  of 
those  hats,”’  says  Cathy  Capizzi, 
Sherpa’s  manager  of  marketing 
services. 

“They’re  always  a  big  hit  at  the 
cocktail  parties,”  she  adds. 

As  for  propeller  beanie  creator 
Nelson,  he  says  the  enduring  pop¬ 
ularity  of  the  hats  continues  to 
amaze  him. 

“Centuries  after  all  my  writings 
have  been  forgotten,  in  some  far 
corner  of  the  galaxy  a  beanie 
copter  will  still  be  spinning,”  he 
writes  on  his  Web  site.  ■ 


Got  great  ideas 


■  Got  an  idea  for  A  Wider  Net 
story?  An  offbeat  technology 
industry-related  topic?  A  fas¬ 
cinating  personality  we  should 
profile?  Let  me  know  at 
bbrown@nww.com. 
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GA  tackles  Web  services  management 


■  BY  JOHN  FONTANA  AND 
DENISE  DUBIE 

Web  services  still  might  be  in 
the  early-adopter  stage,  but  that’s 
not  stopping  vendors  from  align¬ 
ing  their  management  tools  with 
the  nascent  technology. 

Computer  Associates  this  week 
is  scheduled  to  ship  Unicenter 
Web  Services  Distributed  Man¬ 
agement  (WSDM),  the  first  Web- 
services-focLised  tool  from  a 
major  management  vendor.  BMC 
Software,  UP  and  IBM  are  expect¬ 
ed  to  soon  follow,  and  the  three 
companies  are  working  with  CA 
on  a  Web  services  management 
standard  that  promises  to  allow 
interoperability. 

The  Web  services  management 
market  is  already  abuzz  with 
activity  from  smaller  companies 
such  as  Confluent  Software, 
which  this  week  will  unveil  an 
upgrade  to  its  Web  Services 
Management  Platform  that  in¬ 
cludes  quality  of  service,  life 
cycle  management,  and  cluster¬ 
ing  and  load-balancing  features. 
Others  in  this  market  include 
Actional.Amberpoint,  Blue  Titan, 
Digital  Evolution  and  Infravio. 

Despite  all  the  activity,  experts 
warn  end  users  to  be  patient. 

“Most  IT  buyers  are  not  ready 
to  buy  all  this  management  stuff 
because  the  complexity  of  their 
Web  services  infrastructure  is  not 
there  yet,”  says  Nick  Gall,  senior 
vice  president  of  technology 
re.search  services  at  Meta  Group. 
“Tlie  established  vendors  are  on 
top  of  this  space,  and  the  start¬ 
ups  will  likely  move  into  specific 
niches,  get  acquired  or  disap¬ 
pear.”  Gall  .says  it’s  good  that  ven¬ 
dors  are  getting  their  feet  wet 
now  because  IT  will  be  looking 
for  management  help  as  Web 
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XTHIS  WEEK'S  QUESTION; 

What  does  the  acronym 
SOAP  stand  for? 


Get  tlie  .iiiswer  otine. 
N«twwi  WarM  Fusim  and  enter 
2349  !n  tfie  Search  box. 


Looking  for  a  slice  of  the  pie 


Traditional  management  vendors  are  looking  to  get  into  the  Web  services  mix,  which 
is  now  crowded  with  start-ups. 


Vendors 

Product(s) 

Description 

Important 

acquisition 

BMC 

BMC  Service  Impact  Manager 

Pairs  service  modeling  with  event  and 
application  management  tools. 

IT  Masters 

CA 

UnicenterWSDM 

Combining  with  UDDI  directory  and 
platform-specific  tools. 

Adjoin 

HP 

OpenView  Management 
Integration  Platform 

OpenView  combined  with  data  integration 
and  Web-services-standards-based 
technology. 

Talking  Blocks 

IBM 

Tivoli  Monitoring  for  Web 
Infrastructure 

Manages  the  infrastructure,  supporting 
e-business  apps. 

None  to  date 

Tivoli  Monitoring  for 
Transaction  Performance 

Tracks  end-user  experience  and  application 
performance  from  start  to  finish. 

services  explodes  over  the  next 
three  years. 

The  major  vendors  have  other 
reasons  for  the  early  start,  in  that 
their  efforts  will  support  their 
utility  computing  strategies, 
which  promise  to  help  IT  build 
data  centers  with  intelligent 
hardware  and  smart  software. 

“Web  services  management 
also  is  a  key  part  of  the  move¬ 
ment  toward  service-oriented 
architectures,  which  is  a  new 
approach  to  organizing  an  enter¬ 
prise  data  center,”  says  Jason 
Bloomberg,  an  analyst  with 
ZapThink.  “Connecting  Web  ser¬ 
vices  to  on-demand  computing 
is  all  part  of  treating  software  as 
components  that  you  can  reuse.” 

CAs  Unicenter  WSDM  was 
developed  using  Service  Ori¬ 
ented  Management  and  Monitor¬ 
ing  Architecture,  which  the  com¬ 
pany  acquired  when  it  bought 
Adjoin  earlier  this  year.  The  soft¬ 
ware  monitors  Web  services  mes¬ 


sages  as  they  pass  among  end¬ 
points  within  a  service-oriented 
architecture.  It  also  automatically 
discovers  Web  services  on  a  net¬ 
work  and  sets  health-monitoring 


levels.  The  ability  to  examine  the 
XML  message  stream  differs  from 
the  traditional  management  prac¬ 
tice  of  embedding  agents  in  each 
system  component. 


The  WSDM  platform,  which 
runs  on  Linux,  Solaris  and 
Windows,  requires  and  a  mini¬ 
mum  of  two  servers  and  costs 
$50,000.  ■ 


Hannigan 

continued  from  page  1 

[carrier]  perspective.  You ’re  not  in  the  indus¬ 
try  for  more  than  a  day  without  recognizing 
AT&T  as  the  gold  standard.  I  always  regarded 
AT&T  as  a  fierce  but  classy  competitor. 

[AF&T  Chairman  and  CEO]  Dave  Dorman 
was  on  our  board  [at  Sabre  Holdings,  along 
with]  Royce  Caldwell,  the  vice-chairman  and 
COO  at  SBC  for  years.  We  could  have  sold 
tickets  to  our  board  dinners  from  a  telecom¬ 
munications  discussion  perspective.  A  few 
weeks  ago,  Dave  and  1  started  talking  about 
some  possibilities,  and  it  became  intriguing 
pretty  quickly,  especially  because  1  thought 
the  time  was  right  from  a  succession  per¬ 
spective  at  Sabre. 

Coming  in  from  a  different  industry,  how  do  you 
view  the  state  of  AT&Ts  business  and  consumer 
services  operations? 

Tlie  entire  industry  is  challenged  from  over¬ 
capacity  and  price-ero.sion  perspectives.  1  like 
our  position  relative  to  our  competitors,  but 
the  indu.stry  has  always  been  fierce,  and  that 
hasn’t  changed.  If  anything,  it’s  accelerated. 
For  us,  it’s  all  about  competing  aggressively  to 
make  sure  that  we  are  competitive  from  a 
price  pers{>ective.TIiere’s  also  a  little  bit  of, 
‘Oh.l  didn’t  know  you  guys  did  that.’ So  we 
need  to  be  a  heck  of  a  lot  more  aggressive 
talking  about  what  we  bring  to  the  table,  not 
just  from  a  long-distance  perspective  but  in 
local,  LAN  and  systems  integration  as  we  go 
further  into  the  customer’s  network. 

What  do  you  view  as  AT&Ts  competitive  advan¬ 
tages  and  challenges? 

Srjme  of  our  competitors  are  just  going  to 
iiave  to  go  away  from  an  overcapacity  per¬ 


spective.  Even  with  the  turnaround  in  the 
economy,  there’s  just  a  lot  of  capacity  out 
there.  Our  strength  is  our  capability,  our  port¬ 
folio.  That  goes  to  making  sure  that  we’re 
spending  a  great  deal  of  time  with  our  cus¬ 
tomers.  I  was  with  customers  for  hours  yes¬ 
terday  and  will  be  again  today  ensuring  that 
we  are  telling  the  story  and  bending  the  rev¬ 
enue  line  [upward]. 

So  your  priority  is  to  generate  top-line  growth  in 
business  services? 

Correct.  But  first  things  first.  Flattening  the 
rate  of  decline  is  Step  Land  then  we  go 
from  there.  [Other  priorities  are]  new  capabil¬ 
ities  and  products. Voice  over  IR  [for  exam¬ 
ple,]  is  disruptive  technology  and  there  aren’t 
that  many  times  in  life  where  the  big  guy  — 
the  company  with  $34  billion  in  revenue  — 
actually  has  the  opportunity  to  use  disruptive 
technology  to  its  advantage.  We’ll  start  with 
VoIP  aggressively  in  the  consumer  and  small- 
business  space. 

What  are  your  strategies  for  growing  business 
service  revenue? 

It  goes  to  getting  deeper  into  our  cus¬ 
tomers’  networks.  I’m  talking  about  our 
application-aware  network  and  making  sure 
that  we’re  working  at  the  application  layer 
with  our  customers.  It’s  really  important  for 
us  that  we  are  way  beyond  ports  and  pipes. 
The  network  integration  suite  is  really 
important  to  us. 

Betsy  Bernard  was  viewed  as  a  cost-cutter,  a  busi¬ 
ness  stabilizer.  Are  you  the  growth  generator? 

Certainly,  that's  Job  Land  I've  had  the 
opportunity  over  the  years  with  terrific  teams 
to  be  able  to  do  that  at  both  Sprint  and  SBC. 
At  the  same  time, some  important  work  has 


been  done  from  a  cost  structure  perspective 
at  AT&T.  It  will  continue  to  be  incumbent 
upon  us  to  make  sure  that  we  have  the  best 
cost  structure  in  the  industry,  and  it’s  incum¬ 
bent  upon  us  because  we  have  the  scale. 
[But]  we  are  all  about  offense,  about  taking 
share,  expanding  our  product  set  —  particu¬ 
larly  in  the  growth  areas,  the  data  areas. 

What  capabilities  ftt>m  Sabre  can  you  map  to 
AT&T? 

We  were  a  technology  pioneer  similar  to 
AT&T  You  could  argue  it  was  the  first  net¬ 
work-based  application,  the  first  electronic 
exchange  in  the  computer  reservations  sys¬ 
tems  space.  And  certainly  from  a  Travelocity 
perspective,  it  was  all  about  the  functionality 
to  the  consumer  and  leaping  the  chasm.  Not 
that  many  years  ago,  95%  of  travel  was  trans¬ 
acted  through  traditional  travel  agents.That 
number’s  now  more  like  55%  in  a  more  self- 
serve  environment  with  billing  that  capability 
right  to  the  consumer.  Sabre  Holdings  was 
the  largest  privately  held  data  center  in  North 
America  for  decades  . .  .driving  down  costs, 
increasing  our  ability  to  roll  out  feature/func¬ 
tionality  faster  —  all  the  things  that  the  AT&T 
guys  have  been  doing  for  years  as  well. 

But  the  fun  part  was  being  a  customer. 
When  you’re  connecting  66,000  travel 
agents  in  a  computer  reservation  service 
business  and  120  countries,  you  are  a  big 
user  of  the  network.  ■ 

More  online! 

Leam  more  behind 
Betsy  Bernard's 
surprise  departure. 
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BEAT  THE  ODDS  WITH 


TREND  MICRO 


For  a  free  evaluation,  call  1.888.58.TREND 
or  go  to  www.trendnnicro.com 
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Beat  the  odds  with  Small  and  Medium 
Business  security  from  Trend  Micro. 


Trend  Micro,  the  global  leader*  at  the  gateway,  delivers  the  only  antivirus  and 
content  security  solutions  created  specifically  for  small  and  medium  businesses. 
Why  settle  for  costly  enterprise  or  bundled  products  when  you  can  get  a 
purpose-built  anti-Spam  and  antivirus  product  designed  to  grow  with  your 
business?  You  focus  on  building  your  business.  WeTl  focus  on  protecting  it 
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n  an  extreme  wor  d. 


BLACKDIAMOND«10808,  NOT  JUST  ANOTHER  PRETTY  80X 


IS  WHERE  BRAWN  MEETS  BRAINS 


I 

;V«, 


Introducing  the  only  core  switch  platform  that  delivers  major 
breakthroughs  in  the  areas  of  scalability,  extensibility,  resiliency 
and  security.  The  BlackDiamond  10808  goes  beyond  the  expected 
by  delivering  the  industry’s  highest  density  of  10  Gigabit  and 
Gigabit  Ethernet.  In  addition,  4GNSS  technology  featuring  T-Flex 
programmable  ASICs  ensures  support  of  emerging  protocols 
without  costly  hardware  upgrades  -  offering  revolutionary 
investment  protection.  How's  that  for  a  switch? 


GO  BEYOND 

WITH  EXTREME  NETWORKS 

Contact  Extreme  Networks  at  I 

1.888.257.3000  or  visit  us  on  the  web  at  j 

www.extremenetworks.eom/go/t0808Jitm  i 
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■  UN/WAN  SWITCHES  AND  ROUTERS 

■  ACCESS  DEVICES  ■  SERVERS  ■  VPNS 

■  OPERATING  SYSTEMS  ■  NETWORKED  STORAGE 

■  VOIP  ■  WIRELESS  NETWORKS 


switch  tai^ets  attacks 


in  harm's  way 


Radware  has  added  security  features  to  Web  switch 
technoiogy  and  created  the  DefensePro  switch.  The  box 
can  anaiyze  traffic  against  1,200  attack  signatures. 


Router 


IP  WAN 
or  Internet 


Radware  DefensePro 
switch 


LAN  switch 


The  appliance  can  inspect  Layer 4  and  Layer? 
IP  packet  information  and  permit  or  deny  traffic 
if  packets  contain  known  attack  signatures. 
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Radware 

■  BY  PHIL  HOCHMUTH 

Radware  last  week  debuted  a  security 
appliance  that  could  help  businesses  stop 
Web-based  attacks  such  as  Welchia  and 
MS-SQL  Slammer  at  the  network  gates. 

The  DefensePro  appliance  is  a  modified 
version  of  Radwares  Web  switch  that  the 
vendor  says  can  identify  and  stop  mali¬ 
cious  IP  traffic  by  inspecting  packets  at 
Layer  4  through  Layer  7.The  company  adds 
that  its  Gigabit-speed  box  can  match  the 
performance  of  other  security  appliances 


■  Plasmon  and  Sony  have  launched 
a  technology  for  securing  archival 
storage.  Ultra  Density  Optical  dri 

ves  and  media  are  available  in  write- 
once  or  rewriteable  formats.  HP  and 
IBM  have  adopted  the  drive  format 
for  their  server  platforms.  Ultra 
Density  Optical  succeeds  the  5.25- 
inch  Magneto-Optical  technology, 
used  for  archiving  reference  informa¬ 
tion  required  for  litigation  and  regula¬ 
tions.  It  uses  blue  laser  recording 
rather  than  the  red  lasers  that 
Magneto-Optical  and  DVD  use,  giving 
densities  of  30G  bytes  in  a  5.25-inch 
cartridge.  Ultra  Density  Optical  costs 
$2  per  gigabyte,  one-fifth  the  cost  of 
Magneto-Optical  media.  Ultra  Density 
Optical  and  Magneto-Optical  drives 
can  exist  in  the  same  library,  affording 
users  a  migration  path. 

■  EMC  and  Outerbay  Technologies 

announced  last  week  that  Outerbay’s 
database  archiving  Application  Data 
Management  software  would  be  inte¬ 
grated  into  EMC’s  ControlCenter  soft¬ 
ware.  The  integration  will  let  cus¬ 
tomers  improve  the  performance  of 
their  databases  by  migrating  old  data 
to  less-expensive  storage  resources. 
Outerbay's  ADM  software  is  a  suite  of 
software  that  relocates  dormant 
structured  database  transactions  to 
online  archives  stored  on  more  cost- 
effective  servers  and  storage  devices. 
EMC  expects  to  ship  the  integrated 
product  in  the  first  quarter  of  2004. 


at  a  lower  cost. 

DefensePro  uses  Radware’s  inspection 
technology  to  glean  information  on  IP 
packets  for  security  purposes,  instead  of 
Web  switch  tasks  such  as  server  farm  traf¬ 
fic  optimization.  Network  processors 
added  to  the  Web  switch  match  Layer  4  to 
Layer  7  packet  data  against  1,200  known 
attack  signatures  stored  in  the  box’s  firm¬ 
ware.  Polices  can  be  set  to  discard  or  re¬ 
route  certain  kinds  of  traffic  based  on 
attack  signature  matches. 

The  device  sits  behind  an  enterprise 
router  and  can  fitter  incoming  and  outgo¬ 
ing  traffic  (see  graphic). 

The  DefensePro  was  beta-tested  in  the 
network  of  Evergreen  Assurance,  a  service 
provider  of  remote  disaster-recovery  and 
failover  services  to  corporations  such  as 
the  International  Monetary  Fund,  Forbes 


■  BY  TIM  GREENE 

While  56K  bit/sec  modems  have  been  on 
the  market  since  1997,  the  wrangling  con¬ 
tinues  over  who  deserves  credit  —  and  roy¬ 
alties  —  for  the  technology 

Analog  Devices,  which  makes  modem 
chipsets,  last  week  settled  out  of  court 
for  an  undisclosed  amount  with  Brent 
Townshend,  who  holds  five  patents  on 
the  56K  modem  technology.  He  says  the 
company  owed  him  back  license  fees 
and  says  it  agreed  to  pay  the  fees  on 
future  modem  chips. 

This  is  the  latest  round  of  sparring  that 
has  gone  on  since  Townshend  announced 
in  1997  he  found  a  way  boost  to  download 
speed  by  66%  over  the  performance  of  the 
then-fastest  modems.  Many  companies 
licensed  the  technology,  but  others  didn’t. 
Rockwell,  which  makes  modem  chips, 
fought  Townshend  in  court  for  three  years 
to  avoid  paying,  but  finally  settled  out  of 
court  in  2001  for  an  undisclosed  amount. 

But  other  Townshend  suits  continue 
against  chip  makers  Agere  Systems,  ESS 
Technologies  and  Intel  and  network  equip¬ 
ment  maker  Cisco.  Townshend  says  these 
companies  have  used  his  technology  with¬ 
out  permission,  and  they  say  he  unreason¬ 
ably  asks  too  much.  A  single  trial  for  all  the 
companies  is  set  for  July 

An  Agere  spokeswoman  says  Town- 
shend’s  suit  has  no  merit  and  that  Agere 
believes  it  does  not  need  a  license.  A  Cisco 


.com  and  the  American  Federation  of 
Teachers.  The  box  will  be  installed  to  add 
network  attack  protection  to  Evergreen’s 
service  offerings. 


spokeswoman  says  it  won’t  comment  on 
ongoing  litigation.  ESS  and  Intel  could  not 
be  reached  for  comment. 

Theoretically  the  suits  could  have  an  im¬ 
pact  on  bank  accounts  of  corporations  be¬ 
cause  under  the  law,Townshend  could  sue 
users  with  unlicensed  modems.  Experts 
say  that  scenario  is  unlikely  because  there 
would  be  so  many  grievances,  and  each 
user  would  ultimately  have  to  pay  little. 
Plus  Townshend  says  he  is  not  looking  to 
individual  companies  for  recompense. 

But  he  does  note  that  the  law  also  pro¬ 
hibits  sale  of  unlicensed  items,  so  supply 
channels  for  unlicensed  modems  could  be 
shut  down.  But  Townshend  says  he  is 
focused  on  those  that  make  the  modems. 

The  deal  he  worked  with  the  bulk  of 
modem  vendors  starting  in  1997  was  for 
them  to  pay  $1.25  per  PC  modem  and 
$2.50  per  server  modem.  That  fee  has 
since  been  lowered,  and  a  declining  rate 
schedule  has  been  set  with  license  fees 
diminishing  over  time  to  19  cents  for  soft¬ 
ware  modems  and  31  cents  for  hardware 
modems  in  2005.  Currently,  the  going  rate 
is  44  cents  per  PC  hardware  modem  and 
22  cents  for  software  modems,Townshend 
says,  it  is  double  that  for  server  modems. 

With  virtually  all  commercial  PCs  ship¬ 
ping  with  56K  modems  as  a  standard  fea¬ 
ture,  the  number  of  modems  shipping  this 
year  worldwide  is  expected  to  reach  about 
120  million,  says  Ernie  Rapiere,  a  senior 
analyst  with  Mobility  IT.  Townshend  won’t 


“DefensePro  fills  gaps  in  our  approach,” 
says  John  Liccione,CTO  for  Evergreen. The 
service  provider  offered  basic  firewall 

See  Radware,  page  20 


say  how  much  this  has  meant,  but  if  all  the 
modems  sold  this  year  were  soft  modems, 
they  would  represent  $26.4  million  in 
license  fees.  In  2002,  vendors  sold  98  mil¬ 
lion  modems. 

The  price  of  the  chips  used  to  make 
modems  has  been  coming  down,  and 
modem  cards  range  from  $15  to  $80, 
depending  on  their  quality,  Rapiere  says.  He 
says  he  expects  modem  sales  to  grow  for 
the  next  few  years  and  then  taper  off  as 
broadband  becomes  ubiquitous  from 
homes,  and  wireless  Internet  access  ser¬ 
vice  becomes  widely  available.  But  analog 
modems  as  backup  likely  will  be  sold  for 
another  20  years,  he  says. 

Townshend’s  patented  discoveries  en¬ 
able  downloading  data  from  the  Internet  at 
up  to  56K  bit/sec  over  a  standard  analog 
dial-up  phone  line.  That  speed  is  achiev¬ 
able  only  in  the  download  direction 
because  it  involves  no  noisy  analog-todigi- 
tal  conversions  on  the  line  that  slow  data 
rates.  Digital-to-analog  conversions  create 
less  noise,  and  that  is  the  only  type  of  con¬ 
version  necessary  from  an  ISP  using  digital 
modems  at  its  points  of  presence.  Upload 
speeds  for  the  modems  is  38.6K  bit/sec. 

His  discovery  sparked  the  modem  wars 
of  1997,  when  two  competing  implementa¬ 
tions  of  56K  technology  — called  x2  and 
K56Flex  —  vied  for  supremacy  Ultimately, 
the  International  Telecommunications 
Union  set  a  standard  and  all  vendors 
adopted  it.B 


56K  modem  inventor  wants  his  due 
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Notes  from  the  State  of  LAN  road 


A  few  weeks  back,  we  concluded  this 
year’s  Network  World  State  of  the  LAN 
tour.  For  those  who  attended,  here  are 
some  observations  about  what  we  heard 
—  and  perhaps  more  importantly  some 


comparisons  with  previous  years. 

A  significant  part  of  our  day  is  devoted  to 
discussion  with  attendees.  While  we  are 
always  fortunate  enough  to  get  hit  with 
good  questions,  this  year  the  quantity  and 
especially  the  quality  of  those  questions 
both  rose  dramatically.  In  general,  ques¬ 
tions  were  anything  but  basic  and  typically 
dealt  with  issues  one  only  arrives  at  after 
significant  research  has  taken  place. 

While  our  population  sample  was  clearly 
too  small  to  draw  significant  conclusions,  it 
certainly  seemed  that  our  attendees  were 
more  educated  on  key  issues  than  they 
were  in  the  past.  One  might  suppose  that 
the  current  economic  climate  has  trig¬ 
gered  a  significant  amount  of  IT  introspec¬ 
tion.  The  result  being  that  we  have  a  user 
base  more  educated  and  less  likely  to  be 
simply  led  around  by  vendors. 

Unlike  other  events  that  are  targeted  at 
specific  technology  areas,  our  event  is  the 
“big  tent”  where  any  LAN-related  topic  is 
allowed.Thus,we  got  a  good  idea  of  what’s 
on  people’s  minds. 

For  starters,  the  converged  network  seems 
to  be  a  given.  Certainly  the  network  vendors 
feel  that  way  (and  have  for  a  while), but  this 
year  there  wasn’t  a  dissenting  voice  to  be 
heard.  While  the  “five-nines”  of  uptime  that 
traditional  PBX  systems  deliver  is  still  some¬ 
what  elusive  with  voiceover-lP  systems,  the 
flexibility  and  savings  garnered  by  integrat¬ 
ing  voice  and  data  infrastructure  are  just 
too  significant  to  ignore. 

In  its  presentation,  Cisco  even  expanded 
the  notion  of  the  converged  infrastructure 
to  include  yet  another  network  that  has 
been  traditionally  outside  of  ITs  control: 
the  in-building  security  network.  This  was 
done  in  tandem  with  another  key  theme  of 
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capabilities  to  customers  in  the  past,  he 
says,  but  the  DefensePro  will  allow  for 
more  sophisticated  traffic  blocking. 

“We  like  the  [DefensePro]  because  the 
throughput  and  scalability  is  there:  1,200 
attack  signatures  and  Gigabit  wire  speed 
—  that’s  what  we  need,”  Liccione  says. 

“We  looked  at  what  some  of  the  firewall 
guys  do,  and  [DefensePro]  goes  far 
beyond.  It  has  much  faster  speeds  and 
functionality’ he  adds. 

The  box  includes  16  Fast  Ethernet  ports, 
seven  Gigabit  Ethernet  ports  and  one  lOG 
Ethernet  port.  Each  port  is  capable  of  rout¬ 
ing  traffic  based  on  Layer  4  to  Layer  7 
packet  information  at  wire  speed,  the 
company  says.  For  processing  traffic 
through  its  security  filter,  the  performance 
slows  to  3G  bit/sec,  IG  bit/sec  or  total 
throughput,  depending  on  the  product 
version  installed. 

The  box  will  compete  with  products 
from  security  switch  vendors  including 
Crossbeam  Systems  and  TippingPoint 
Technologies,  and  firewall  vendors  Check 
Point  and  NetScreen  Technologies. 
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DO  YOU  HAVE  THE  CCNP  SELF-STUDY 
MATERIALS  YOU  NEED  TO  SUCCEED? 

Cisco  Press,  the  best-selling  publisher  of  Cisco®  certification 
self-study  books,  brings  you  an  all-new  lineup  of  exam  preparation 
resources  for  the  CCNP®  642  exams.  These  tools  are  completely 
updated  to  focus  specifically  on  new  CCNP  exam  objectives,  and 
are  enhanced  with  a  more  modular,  easily  understood  writing 
style  and  an  improved  testing  engine.  Prepare  for  the  CCNP 
exams  with  these  best-of-breed  self-study  resources — the  only 
ones  authorized  by  Cisco  Systems*. 


CCNP  Certification  Library,  Third  Edition 
ISBN:  1-58720-104-6 

Best  Value!  A  comprehensive  self-study 
exam  preparation  resource  with  four 
CCNP  Exam  Certification  Guides — one 
guide  for  each  exam. 

CCNP  Exam  Certification  Guides  are 
also  sold  individually.  Learn  more 
about  Exam  Certification  Guides  for 
the  BSCI,  BCMSN,  BCRAN,  and  CIT 
exams  at  www.ciscopress.com/ccnp. 


CCNP  Flash  Cards  and  Exam 
Practice  Pack 

ISBN:  1-58720-091-0  •  Stewart,  Donohue, 
Sammut 

Three  methods  of  proven  late-stage 
exam  preparation  in  one  packagel 
Includes  more  than  1100  flash  cards  in 
print,  PC,  and  PDA  formats;  nearly  100 
quick  reference  sheets;  and  a  powerful 
testing  engine  with  more  than  950 
questions  covering  all  exams. 
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Buy  these  new  CCNP  self-study  resources  at  your  favorite 
bookstore  and  get  what  you  need  to  succeed. 


FREE  CHAPTERS! 

Download  free  sample  chapters  of  these  new  CCNP  titles.  It's  easy! 
Search  for  a  book  by  ISBN,  title,  or  author  name,  and  click  through 
to  the  catalog  page.  Select  the  "Sample  Chapter"  link  beneath 
"More  Information"  and  preview  these  new  releases. 


Learning  is  serious  business.  Invest  wisely. 
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power  over  Ethernet  (PoE). 

Speaker  after  speaker  extolled  the  virtues 
of  PoE.  Not  only  would  it  help  enable  inte 
gration  of  IP-based  security  cameras  but  in 
the  case  of  wireless,  it  is  almost  mandatory 
Sprinkling  access  points  throughout  ceil¬ 
ings  in  buildings  is  hard  enough  without 
having  also  to  find  or  run  power.  We  heard 
that  getting  RoE  in  their  networks  would  be 
critical  to  future  expansion. 

It  was  no  surprise  that  wireless  was  also  a 
key  topic.  Speakers  and  attendees  seemed 
in  agreement  that  enterprise-class  wireless 
(as  opposed  to  small  office/home  office) 
will  continue  to  make  great  inroads  but 
that  it  will  complement  rather  than  replace 
wire-line  communications. 

Which  brings  us  to  Gigabit  Ethernet  to 
the  desktop. Vendors  were  pushing  strong 
on  the  topic  —  but  attendees  weren’t  bit¬ 
ing.  While  attendees  would  like  to  have  it 
in  place,  very  few  can  find  reasons  com¬ 
pelling  enough  to  convince  management 
to  go  that  route.  Although  vendors  say 
that  prices  for  Gigabit  copper  ports  are  so 
close  to  lO/lOOM  bit/sec  as  to  make  it  an 
easy  decision,  many  attendees  didn’t  see 
things  that  way.  When  asked  about  plans 
12  to  18  months  out,  though,  many  atten¬ 
dees  agreed  that  by  then.  Desktop  Gigabit 
likely  would  be  the  standard  switch-port 
purchase. 

The  mood  was  upbeat  and  it  appears  that 
many  users  are  poised  to  bring  their  LAN 
infrastructure  up-to-date  —  and  that  has 
got  to  make  vendors  happy. 

Tolly  is  president  of  The  Tolly  Group,  a 
strategic  consulting  and  independent  testing 
company  in  Boca  Raton,  Fla.  He  can  be 
reached  at  ktolly@tolly.com. 


Radware  says  that  its  starting  price  of 
$25,000  for  IG  bit/sec  bf  security  filtering 
is  25%  to  50%  less  than  competing  Gigabit- 
speed  security  appliances  that  offer  simi¬ 
lar  inspection  levels. 

A  recent  Infonetics  survey  of  240  IT 
product  buyers  found  that  users  are  look¬ 
ing  for  the  kind  of  device  Radware  is  offer¬ 
ing:  92%  of  respondents  said  intrusion 
detection/  prevention  were  features  they 
looked  for  when  shopping  for  a  security 
appliance. 

Also,  69%  said  they  prefer  a  security 
appliance  to  operate  “in-line”  —  mean¬ 
ing  the  device  sits  as  a  gateway  on  a  net¬ 
work  ingress/egress  point,  instead  of 
hanging  in  the  background  detecting 
network  threats. 

Several  Web  switch  vendors  have  made 
a  similar  move  to  leverage  their  Layer  4  to 
Layer  7  Web  switch  technology  into  the 
security  market. 

TopLayer  Networks,  F5  Networks  and 
NetScaler,  and  Cisco,  Extreme  Networks, 
Foundry  Networks  and  Nortel,  offer  secu¬ 
rity  features  in  some  of  their  Layer  4  to 
layer  7  gear  that  can  mitigate  denial-of- 
service  attacks  and  other  types  of  mali¬ 
cious  traffic.H 
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iPass  weaves  together  leading  networks  around  the  world,  so  you  can  connect  where  and 
when  you  want.  The  iPass®  Corporate  Access  service  gives  you  wireless,  broadband  and  dial¬ 
up  access  from  over  200  enterprise-ready  providers — delivered  with  secure  authentication, 
centralized  billing  and  management,  and  a  reliable,  consistent  connection  experience.  Try  to 
restrain  yourself.  Learn  how  to  integrate  Wi-Fi  simply,  safely  and  affordably.  View  the 
‘‘Add  Wireless  to  Your  World”  demo  at  www.ipass.com/wireless59 


iPass’ 


Ei.U 

Coi 

3ef  iCi 


B 


12/8/03 


Infrastructure 


www.nwfusion.com 


•oecial  Focus 

WIRELESS  LANs!whatToTo  about  voice  anovideo  trafri^ 


Wireless  LANs  getting  priorities  straight 


BY  JOHN  COX 


With  wireless  LANs  starting  to  be  used  for  more 
than  just  data  traffic,  quality  of  service  is  getting 
taken  more  seriously 

Some  wireless  voice-over-lP  (VoIP)  vendors  have  created 
simple  proprietary  schemes  to  give  voice  priority  on 
WLANs.That’s  critical  for  voice  because  without  it  the 
quality  of  calls  erodes  quickly. 

Separately,  the  IEEE’s  802. 1  le  task  group  is  finalizing 
work  on  a  QoS  standard  that  will  let  WLAN  administra¬ 
tors  set  a  range  of  priorities  for  different  kinds  of  packets 
and  control  the  time  intervals  between  transmitted 
packets. The  ability  to  schedule  traffic  flows  is  critical  in 
transforming  a  WLAN  from  a  network  that  hopes  for  the 
best  to  a  network  that  guarantees  delivery 
But,  as  with  so  much  else  in  WLANs,  none  of  this  will 
be  easy  or  quick. 

Dartmouth  College  in  Hanover,  N.H.,  is  experiencing  a 
growing  need  for  QoS  as  its  campuswide  WLAN  gains 
users  and  traffic, says  Brad  Noblet,  director  of  technical 
services.This  fall,  Dartmouth  —  like  many  other  schools 
with  extensive  WLANs  —  was  hammered  by  a  range  of 
aggressive  network  viruses.The  Nachia  virus,  for  example, 
sent  out  surges  of  Internet  Control  Message  Protocol 
(ICMP)  messages,  fast  and  repeatedly  over  a  range  of 
addresses. 

Tlie  Cisco  access  points  that  Dartmouth  uses  had  a 
vulnerability  in  some  software  versions  that  caused 
them  to  stop  forwarding  traffic  when  receiving  ICMP 
packets.“Without  QoS,  you  can  get  head-of-the-line 
blocking  and  dropped  packets,”  Noblet  says.  Dartmouth 
has  worked  with  Cisco  and  WLAN  switch  vendor  Aruba 
Wireless  Networks  to  correct  any  vulnerabilities  and 
improve  the  ability  to  set  traffic  priorities. 

The  basic  idea  behind  WLAN  QoS  is  to  handle  traffic 
streams  based  on  what  kind  of  packets  they  are,  such  as 


III  You  need  to  make  sure  that 
every  20  milliseconds  voice  traffic 
gets  passed  along.  Otherwise  you 
drop  packets.  9  9 


Brad  Noblet 

Director  of  technical  services,  Dartmouth  College 


voice,  data  or  video.  Class-of-service  features  categorize 
the  traffic,  and  QoS  features  set  priorities  for  delivery. 

“There  needs  to  be  a  mechanism  to  define  traffic 
t>'pes,and  then  you  can  set  [network]  policies  against 
[those  types]," Noblet  says.“You  want  to  make  sure 
there’s  no  interruption  in  your  voice  traffic:You  need  to 
make  sure  that  every  20  milliseconds  voice  traffic  gets 
pas.sed  along.  Otherwise  you  drop  packets." 

“Q(jS  is  needed  in  wireless  LANs  as  more  voice  and 
\  ideo  applications  are  rolled  out,"  says  Lynn  Lucas,  direc¬ 
tor  of  prcxJuct  marketing  for  Proxim.“l  just  received  a 
[request  tor  quote]  from  a  university  that  is  requiring 
supfxjrt  for  24  simultaneous  videostreams  per  class¬ 
room.  We  believe  this  usage  of  video  over  the  WLAN  net- 


WLAN  quality  control 


The  pending  802.11e 
standard  creates  a  way  for 
WLAN  devices  to  identify 
packet  types  and  set 
higher  priorities  for  voice 
and  streaming  media. 
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802.11e  QoS  software 
in  WLAN  equipment: 

•  Identifies  voice 
packets  from  users. 
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•  Grants  them  priority 
over  data  traffic. 
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ensure  “toll  quality." 
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work  will  increase.” 

A  QoS  capability  also  will  let  network  executives 
manage  WLAN  bandwidth,  which  is  quickly  consumed 
by  voice  and  multimedia  applications,  or  just  big  file 
transfers. 

“A  lot  of  our  users  stream  [music  or  other]  files,”  he 
says.“They  could  consume  a  lot  of  the  access  point’s 
bandwidth,  which  today  is  really  pretty  limited.  In  the 
best  case  with  802.1  lb,  we  have  about  6  megabits  per 
second,  tops,  of  useable  bandwidth.” 

Some  vendors,  such  as  SpectraLink  and  Symbol  Tech¬ 
nologies,  have  introduced  their  own  QoS  techniques  that 
let  access  points  and  client  devices  such  as  wireless  VoIP 
phones  give  voice  traffic  priority  on  a  network.  A  number 
of  WLAN  equipment  vendors,  including  Proxim  and  Trap¬ 
eze  Networks,  have  licensed  the  SpectraLink  protocol  to 
support  wireless  voice  applications. 

“  [With  these  schemes]  you  can  boost  voice  traffic  to 
the  highest  level  of  priority,  but  they  don’t  deal  with  the 
problem  of  getting  the  packet  [time]  intervals  correct,” 
says  Jacob  Jorgensen,  president  and  CEO  of  Broadstone 
Networks,  a  start-up  beginning  trials  of  an  appliance 
designed  to  introduce  QoS  in  WLANs.”  [Simple  prioriti¬ 
zation]  works  in  a  lightly  loaded  environment,  but  in 
moderate  to  heavy  loads  it  doesn’t  work  well.” 

Jorgensen  says  that  these  priority  schemes  also  are 
intended  for  voice  traffic  over  WLANs.  But  the  most 
demanding  WLAN  environment  for  QoS  is  one  in  which 
both  voice  and  data  are  being  transmitted. The  propri¬ 
etary  protocols  don’t  take  this  into  account.  In  addition, 
these  protocols  are  not  standards,  and  devices  using  dif¬ 
ferent  vendor-based  QoS  won’t  interoperate. 

The  IEEE  802.1  le  task  group  is  nearing  the  end  of  its 
work  on  a  QoS  standard  for  WLANs.  It  could  gain  final 
approval  at  the  March  IEEE  plenary  meeting, says  Harry 
Bims,CTO  and  founder  of  Airflow  Networks,  and  a  mem¬ 
ber  of  the  802.1  le  task  force. 

Currently,  WLANs  use  a  technique  for  network  access 
called  Carrier  Sense  Multiple  Access  with  Collision 
Avoidance  (CSMA).With  this  technique  each  wireless 
client  “listens"  to  hear  if  the  channel  is  clear  before  trans¬ 


mitting.  If  another  client  transmits  at  the  same  time,  a 
collision  occurs,  and  both  pause  to  wait  for  the  channel 
to  clear. Then  they  try  again. 

This  best-effort  technique  can  cause  big  lags  for  real¬ 
time  applications  such  as  voice  or  video,  which  can’t  tol¬ 
erate  such  delays.“With  best  effort,  you’re  not  guaran¬ 
teed  when  you  can  transmit,”  Bims  says.“The  delays  can 
be  so  long  that  a  real-time  application  breaks.” 

There  are  two  main  parts  to  the  802.1  le  standard,  he 
says.  One  is  a  subset  called  Wireless  Multimedia  Exten¬ 
sions  that  some  vendors  currently  are  implementing.  It  is 
a  fairly  basic  scheme  for  giving  one  type  of  traffic  priori¬ 
ty.  But  it  doesn’t  address  timing,  which  is  critical  for  real¬ 
time  applications. 

This  is  the  focus  of  the  second  part  of  the  standard, 
called  Wi-Fi  Scheduled  Multimedia,  which  can  schedule 
a  uniformly  spaced  series  of  time  periods  that  are  re¬ 
served  solely  for  use  by  a  specified  traffic  flow,  Bims 
says.  Each  schedule  is  called  a  traffic  specification,  and 
only  packets  associated  with  the  designated  traffic  flow 
are  transmitted. 

“This  significantly  mitigates  the  possibility  of  over-the- 
air  packet  collisions  and  creates  guaranteed  time  peri¬ 
ods  when  a  device  knows  it  can  transmit,”  Bims  says.“In 
addition,  the  back-off  rules  of  CSMA  are  suspended,  so 
that  back-to-back  packet  transmissions  are  faster.” 

Broadstone’s  Jorgensen  says  users  will  need  more  than 
what  the  802.1  le  standard  alone  can  offer. “You  need  a 
QoS  infrastructure,  not  just  QoS  features  in  the  [media 
access  control]  layer  [of  the  network],” he  says. 
Broadstone’s  QoS  appliance,  which  will  incorporate  the 
final  802.1  le  standard,  is  designed  to  give  known  WLAN 
users  specific  bandwidth  allocations. 

This  could  permit  a  fixed  number  of  voice  calls,  and 
block  or  allow  videostreaming.  Users  in  one  department 
might  have  priority  over  users  in  another,  or  priority  for 
certain  types  of  traffic.  All  these  policies  are  set  up  via  a  -j 
Web  GUI. 

Bims  acknowledges  there  are  key  areas  the  802.1  le 
standard  ignores  and  that  these  will  require  additional 
software  capabilities  created  by  vendors  outside  the 
standard.  One  area  is  how  neighboring  access  points 
coordinate  their  traffic  flow  schedules  so  that  a  client 
device  can  move  from  one  access  point  to  another  with- 
out  having  to  renegotiate  its  traffic  specification  with  the 
new  access  point.  Companies  such  as  Airflow  and 
Broadstone  will  have  to  handle  this. 

Another  issue  is  that  the  802.1  le  standard  might 
include  several  optional  items  or  features  that  vendors 
can  implement  or  not.  Different  implementations  could 
cause  a  lack  of  interoperability  in  some  products. 

“It’s  only  going  to  get  worse,” says  Dartmouth’s 
Noblet,  with  the  resignation  of  a  network  executive 
who’s  seen  it  all. “It  just  takes  a  lot  longer  to  cook  all 
that  [in  the  standards  body]  when  you  have  a  lot  of 
cooks  in  the  mix.”B 


II 


■  Read  more  about  the  future  of  wireless  LANs 
with  a  focus  on  the  latest  wares  from  switch 
vendors.  PAGE  47. 
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Introducing  Business  Select™  Optical  Media  ' 

At  Imation,  our  goal  is  to  be  the  best  in  our  business.  If  that’s  also  your  company’s 
goal,  we  have  your  storage  solution:  Imation  Business  Select  Optical  Media. 
Whether  it’s  the  scratch-resistant  surface  on  CD-R  media,  the  high-performance  dye 
layer  of  write-once  DVD  media,  or  the  customizable  DVD  video  cases,  this  premier 
series  of  optical  media  incorporates  advanced  technology  with  unsurpassed 
performance  and  reliability  for  today’s  data-intensive  business  applications. 
The  media  is  tested  and  inspected  to  ensure  extreme  data  security  and  longevity. 
It’s  what  you’d  expect  from  the  leader  in  data  storage  for  more  than  50  years. 
Find  out  more  at  www.imation.com/businessselect  ADVANCING  DATA  STDRAGE 
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Control. 


Take  control  of  your  Internet  security. 


Introducing  Proventia”  Enterprise  Protection  Products.  Just  because  Internet  threats  are 
complex,  doesn't  mean  your  security  has  to  be.  Finally,  a  single,  unified  protection  appliance 
that  protects  more  with  less,  eliminating  the  cost  and  chaos  of  multiple  stand-alone  security 
products.  Proventia™  centrally-managed  products  range  from  detection  up  to  completely 
unified  and  proactive  multi-function  protection  appliances,  combining  firewall,  intrusion 
prevention  and  anti-virus  technologies.  Take  control  of  your  enterprise  security.  Switch  to 
Internet  Security  Systems  today.  800-776-2362.  www.iss.net/takecontrol. 
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NotworkWorld 


■  PORTALS  ■  MESSAGING/GROUPWARE 

■  E-COMMERCE  ■  SECURITY 

'  ■  MIDDLEWARE  ■  DIRECTORIES 

■  NETWORK  AND  SYSTEMS  MANAGEMENT 

■  WEB  SERVICES 


■  Windows  utility  vendor  Winternals 
last  week  released  Defrag  Manager 
2.5,  which  includes  the  company’s 
SmartPhase  multi-phase  defragmen¬ 
tation  engine  designed  to  produce 
faster  and  more  thorough  defragmen¬ 
tation  operations.  The  software  sup¬ 
ports  Windows  NT  4.0,  2000  Profes¬ 
sional  and  Server,  XP  and  Server  2003 
on  volumes  ranging  from  20G  bytes  to 
more  than  IT  byte. The  software  is 
priced  at  $50  for  an  individual  server 
license  and  $17  for  a  workstation 
license.  Also,  Winternals  has  reached 
an  agreement  with  Microsoft  that 
will  allow  it  to  release  its  Advanced 
Mode  defragmentation  in  the  next 
version  of  Defrag  Manager.  Advanced 
Mode  optimizes  every  file  on  every 
type  of  disk  regardless  of  Windows 
operating  system,  cluster  size  or  frag¬ 
mentation  condition. 

■  Dirig  Software  last  week  an 
nounced  that  its  Application  Per- 
forniEince  Platform  would  be  incor 
porated  into  Allen  Systems  Group’s 
ASG-TMON  for  eBusiness,  the 
newest  product  in  the  ASG-TMON 
suite  of  enterprise  performance  man¬ 
agement  software.  ASG  acquired  the 
TMON  technology  when  it  picked  up 
Landmark  Systems  early  last  year. 
Landmark  focused  on  helping  network 
managers  monitor  performance  of 
TCP/IP  networks  linked  to  main¬ 
frames.  ASG  is  looking  to  expand  the 
product's  capabilities  to  include  Java  2 
Platform  Enterprise  Edition  manage¬ 
ment,  a  primary  feature  of  Dirig's 
technology.  Dirig  last  month  intro¬ 
duced  its  Application  Performance 
Platform  technology,  which  will  be 
made  available  to  more  than  7,000 
companies  that  employ  ASG's  enter¬ 
prise  software  products  and  services. 

■  Siemens  AG  last  week  said  it  in¬ 
tends  to  acquire  IndX  Software,  a 
maker  of  software  that  lets  large 
industrial  manufacturers  aggregate, 
relate  and  present  operational  and 
business  data  in  a  useful  format  and 
in  real  time.  IndX  is  to  become  part  of 
Siemens  Energy  &  Automation  divi¬ 
sion,  the  company  said. 


Lessons  from  leading  users 

Database  gets  United  there  on  time 

Event-processing  system  shares  time-sensitive  data  to  save  millions. 


■  BY  ANN  BEDNARZ 

Software  for  disseminating  real¬ 
time  operational  information 
is  helping  United  Airlines  save 
$46  million  this  year  by  letting  the 
airline  react  more  quickly  to  un¬ 
planned  events  such  as  inclement 
weather,  mechanical  delays  and 
crew  shortages. 

To  improve  its  responsiveness,  the 
airline  built  an  operations  data  store 
using  infrastructure  software  called 
Real-Time  Event  Processing  System, 
from  software  maker  TimesTen. 
United’s  data  store  provides  continu¬ 
ous  visibility  into  operations,  includ¬ 
ing  the  status  of  United’s  3,300  daily 
flights. 

TimesTen’s  Real-Time  Event  Pro¬ 
cessing  System  is  an  in-memory 
database,  which  stores  information 
locally  in  RAM,  rather  than  on  a  disk 
drive,  to  enable  faster  information 
retrieval  and  dissemination.  It’s  an 
alternative  to  application-specific 
See  United,  page  28 


Airline  dynamics 


United  Airlines  uses  TimesTen  software  to  create  a  single,  common 
platform  for  capturing,  storing  and  distributing  event  information, 
such  as  a  weather  delay,  to  its  myriad  enterprise  applications,  including 
flight  scheduling,  crew  scheduling,  catering  and  maintenance. 


United’sTimesTen  system  captures  and 
aggregates  event  information  recorded  in  the 
airline’s  enterprise  applications  and  distributes 
key  updates  to  appropriate  applications. 


Chicago 
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United  users  such  as  pilots, 
flight  attendants,  ground 
crews  and  caterers  see  data 
such  as  flight  status  and 
crew  scheduling  in  real  time. 
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TimesTen 
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applications 


Interactive  voice-response  systems  and  online  flight-status  applications  for 
United  customers  poll  theTimesTen  platform  to  retrieve  up-to-date  information. 


Brightmail  stands  out  from  me-too  crowd 


■  BY  CARA  GARRETSON 

As  proof  of  the  recent  explosion  in  spam¬ 
fighting  products,  an  analyst  report  issued 
last  month  highlights  the  $100  million  in 
venture  capital  that  has  been  poured  into 
these  companies  over  the  last  12  months. 
Anti-spam  software  maker  Brightmail, how¬ 
ever,  was  not  on  this  list. 

That’s  because  as  the  Ferris  Research 
report  points  out,  Brightmail  is  making 
money,  unlike  many  start-ups  in  this  now- 
crowded  market. 

The  privately  held  company,  which  says  it 
turned  a  profit  for  the  last  three  quarters 
and  has  $25  million  in  the  bank,  plans  to 
ride  its  current  momentum  into  a  public 
offering  in  2004,  according  to  CEO  and 
President  Enrique  Salem.  Brightmail, which 
began  selling  spam  filters  to  ISPs  in  1998 


and  released  an  enterprise  version  of  its 
software  last  year,  has  emerged  as  a  top 
spam  fighter.  In  a  market  flooded  with  me- 
too  products  from  countless  start-ups,  hav¬ 
ing  a  time-tested  product  and  impressive 
customer  list  are  important  distinctions. 
Brightmail’s  filters  scan  1 1%  of  the  world's 
email  that  traverses  the  Internet,  a  figure 
that  all  the  other  vendors  combined  can’t 
match,  Salem  says. 

Expanding  into  e-mail  management 

In  addition  to  its  focus  on  fighting  spam, 
Brightmail  intends  to  expand  into  the  larg¬ 
er  category  of  email  management.  “We 
have  the  opportunity  to  be  the  dominant 
provider  of  email  solutions,”  he  says.  For 
example  “we’re  all  spending  too  much 
time  in  email,  we  want  to  do  intelligent 
management  of  email.” 


In  the  meantime,  the  company  is  com¬ 
peting  in  an  anti-spam  market  that  just 
about  everyone  wants  a  piece  of.  In  addi¬ 
tion  to  the  70  or  so  anti-spam  vendors  sell¬ 
ing  products,  Brightmail  also  must  com¬ 
pete  with  anti-virus  giants  such  as 
Network  Associates  and  Symantec  (which 
owns  12%  of  Brightmail  but  is  developing 
its  own  anti-spam  technology)  and  email 
security  vendors  such  as  Clearswift  and 
Tumbleweed  Communications  that  also 
offer  spam  filters.So  while  Brightmail  cuts 
a  high  profile  among  anti-spam  vendors 
today,  there  are  no  guarantees  for  the 
future  as  the  market  consolidates. 

“Brightmail  has  a  very  nice  base  from 
which  to  work,  a  substantial  revenue 
stream  from  ISPs,  nice  partnerships . . .  their 
chances  are  as  good  as  anyone’s,”  says  Matt 
See  Brightmail,  page  28 
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The  Unwired  Office 

starts  here. 


The  promise  of  a  truly  wireless  workforce 
is  being  fulfilled.  Because  Inter  Centrino"  mobile 
technology  delivers  unprecedented  levels  of 
mobility  for  your  users  and  easier  deployment 
for  you.  Intel  is  working  with  other  industry 
leaders  to  make  wireless  networking  not  only 
reliable,  but  secure.  And  Intel  continues  to 
work  closely  with  Cisco  to  extend  Intel  Centrino 
mobile  technology’s  ability  to  support 
enhanced  wireless  security  protocols.*  Now 
you  can  do  something  the  whole  office 
will  thank  you  for.  Unwire.  For  all  the  details, 
go  to  intel.com/unwire. 


02003  Intel  Corporation.  Intel,  Intel  Inside  and  the  Intel  Centrino  logo  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  inlhe  United  States 
and  other  countries.  Ottrer  names  and  brands  may  be  claimed  as  the  property  of  others.  All  rights  reserved.  System  performance,  battery  lite,  wireless 
performance  and  lunctiorwiity  will  vary  depending  on  your  specific  hardware  and  software  configurations.  See  httpi'/www.intel.com/products'centrioormore.  info 
lor  more  inlormatioo  'Some  security  solutions  may  not  be  supported  by  your  PC  manufacturer.  Check  with  your  PC  manufacturer  lor  details  on  availability. 
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NetContinuum  boosts 
security  gateway 


■  BY  ELLEN  MESSMER 

NetContinuum  this  week  is  scheduled  to 
launch  an  updated  version  of  its  applica¬ 
tion-firewall  appliance  for  protecting 
HTML-based  and  some  non-Web  applica¬ 
tions  from  about  4,000  known  attacks 
aimed  at  subverting  servers. 

NetContinuum’s  Web  Security  Gateway 
4.0  adds  a  way  to  guard  against  attacks 
aimed  at  22  TCP  and  User  Datagram  Pro¬ 
tocol  (UDP)  ports  used  by  Oracle  data¬ 
bases,  application  servers  and  e-com- 
merce  applications. 

NetContinuum  also  has  built  a  stateful- 
inspection  firewall  directly  into  its  Web 
Security  Gateway  with  the  idea  that  IT 
managers  wouldn’t  have  to  buy  a  sepa¬ 
rate  network  firewall,  as  they  often  do 
now,  to  place  in  front  of  the  Web  appli¬ 
cation  firewall. 

“It  comes  from  a  desire  to  simplify  the 
DMZ,”  says  Wes  Wesson,  NetContinuum’s 
vice  president  of  marketing.  There  are  too 
many  devices  in  the  firewall-based  demili¬ 
tarized  zone  at  the  perimeter  of  corporate 
access  to  the  Internet,  he  says. 

Independent  test  lab,  ICSA  Labs  is  testing 
Web  Security  Gateway  4.0’s  integrated 
stateful-inspection  firewall.  Beta  versions 
are  available  now,  and  general  availability 
is  expected  at  the  end  of  next  month. 


NetContinuum  will  be  the  first  vendor  — 
competitors  include  KaVaDo,  Sanctum 
and  Teros  —  to  integrate  a  traditional  fire¬ 
wall  that  blocks  TCP  and  UDP  port  access 
into  an  application  firewall  that  works  by 
stopping  a  variety  of  attacks,  such  as  cross¬ 
site  scripting  or  SQL  Injection. 

While  some  IT  managers  like  the  idea  of 
blending  the  two  capabilities  into  one  unit, 
others  are  less  convinced  this  is  a  good 
path. 

“We’d  want  to  have  a  separate  firewall  in 
front  of  the  Web  application  firewall,’’  says 
Eric  Beasley  senior  network  administrator 
at  Baker  Hill,  which  hosts  online  loan 
applications  for  about  100  banks  in  the  US. 
“There  are  a  growing  number  of  multi¬ 
function  devices,  but  I’m  shying  away  from 
them  because  I’m  not  sure  they  represent 
the  best  of  breed.’’ 

Baker  Hill,  which  is  in  Indianapolis,  puts 
Check  Point  and  Nokia  firewalls  in  front  of 
Teros  Secure  Application  Gateways  appli¬ 
ances  in  three  sections  of  its  network  to 
block  possible  attacks  against  internal 
Microsoft-based  appIications.The  network- 
layer  firewall  is  an  added  line  of  defense, 
especially  if  the  application  firewall  fails 
for  any  reason,  Beasley  maintains. 

Web  Security  Gateway  4.0  costs  $29,000 
with  support  for  lOOM  bit/sec  and  $39,000 
for  the  IG  bit/sec  model.  ■ 


Brightmail 

continued  from  page  25 

Cain,  an  analyst  with  Meta  Group.  “If  they 
make  the  right  moves  at  the  right  time  they 
have  a  reasonable  chance  of  being  one  of 
the  vendors  standing.” 

No  one’s  perfect 

Another  challenge  facing  Brightmail 
and  other  anti-spam  companies  is  imper¬ 
fect  technology  —  today  no  company 
can  guarantee  to  catch  all  spam  entering 
an  organization  while  ensuring  all  legiti¬ 
mate  mail  passes  through.  Since 
Brightmail  was  founded,  it  has  focused  on 
providing  customers  with  a  low  falsepos¬ 
itive  rate,  Salem  says.  But  maintaining  a 


m  PROFILE:  BRIGHTMAIL 


Location:  San  Francisco 


Founded:  1998,  by  former  AOL 
executive  Sunil  Paul. 


CEO:  Enrique  Salem 


Primary  business: 

Anti-spam  and  anti¬ 
fraud  products. 


Financing:  Privately 
held;  $25  million  in 
the  bank;  investors 
include  Symantec, 

Accel  Partners,  Crosslink  Capital 
andTechnology  CrossoverVentures. 


Employees:  150 


Key  customers:  eBay,  Booz  Allen 
Hamilton  and  Deutsche  Bank. 


low  false-positive  rate  means  Brightmail’s 
software  might  not  block  as  much  spam 
as  others;  a  trade  off  the  company  is  will¬ 
ing  to  live  with.“lf  anyone  says ‘I’ve  got  the 
final  answer  to  spam,’  they  haven’t  under¬ 
stood  the  problem,”  he  says. 

Dennis  Bell,  director  of  IS  operations 
with  chip  maker  Cypress  Semi¬ 
conductor  of  San  Jose,  agrees  that  main¬ 
taining  a  low  false  positive  rate  is  essen¬ 
tial  to  businesses,  which  can’t  afford  to 
miss  crucial  communication  because  a 
filter  mislabeled  a  message  as  spam. 
However,  Bell  continues  to  push 
Brightmail  to  improve  its  software’s  abil¬ 
ity  to  catch  spam. 

“We  encourage  Brightmail  to  keep  up 
the  development  work,”  Bell  says,  adding 
he’s  seen  the  software  improve  from  catch¬ 
ing  93%  of  all  spam  received  to  about  97  % 
over  the  past  18  months.  “Brightmail  may 
not  be  the  best  in  terms  of  total  [spam] 
block,  but  they  are  with  false  positives,  and 
that’s  important  to  us.” 

Although  the  anti-spam  market  is  a 
hot  one,  most  experts  predict  that  the 
onslaught  of  unwanted  e-mail  will 
wane  as  more  filters  are  employed 
and  the  return  rates  that  spammers 
/  Y  see  on  their  mailings  dwindle. 

A  However,  that  doesn’t  mean  compa- 
nies  such  as  Brightmail  will  go  away 
Salem  says.  “We  will  get  this  [spam] 
problem  under  control  over  the  next 
three  years,”  he  says. “People  say  if  we  do 
that,  our  business  is  over,  but  if  you  take 
police  off  the  streets,  crime  comes  back. 
Spammers  will  always  be  there,  and  we’ll 
always  be  there,  too.”  ■ 
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data  caches,  aimed  at  transaction-heavy  users  such  as 
financial  services  firms  and  telecom  companies  that 
depend  on  real-time  updates,  says  Jim  Groff,  CEO  of 
TimesTen.  The  common  denominator  is  systems  that 
need  to  process  thousands  or  tens  of  thousands  of 
events  per  second,”  Groff  says. 

United’s TimesTen-powered  data  store  serves  as  a  single 
source  for  collecting, storing  and  distributing  event  data 
to  multiple  enterprise  applications  —  including  flight  sta¬ 
tus,  crew  scheduling  and  gate  information  displays  — 
that  require  accurate  and  timely  operational  data. 
Notification  features  inform  users  when  relevant 
changes  occur,  such  as  immediately  alerting  catering 
staff  to  airport  gate  changes. 

In  addition, United  uses  the  system  to  anal>^e  available 
aircraft  and  crew  resources  and  project  what  the  rest  of 
the  day,  or  the  next  day,  is  going  to  look  like,  says  John 
Byrne,  director  of  applications  development  at  United. 
“Wlienever  there’s  an  irregular  operation,  we  have  to  be 
able  to  predict  what’s  going  to  happen  and  come  up  with 
mcHlels  that  sui^est  solutions  to  recover  the  airline  more 
quickhf  B>'iTie  says.Tfiat’s  really  where  we’ve  gotten  a  lot 
of  value  from  this  solution.” 

The  airline  estimates  it  will  save  $17.4  million  in  2003 


through  hard,  quantifiable  savings  such  as  more-efficient 
crew  scheduling  and  fuel  usage.  Better  scheduling 
means  “fewer  pilots  and  flight  attendants  sitting  in  the 
wings,  waiting  for  an  assignment,”  Byrne  says.“And  we’ve 
seen  some  good  increases  in  our  fuel  efficiency  as  a 
result  of  being  able  to  more  accurately  predict  arrival 
times.  Consequently,  pilots  don’t  load  extra  fuel  on  the 
aircraft.” 

United  —  whose  parent  company,  UAL  Corp.,  is  in  the 
midst  of  corporate  restructuring  after  filing  for  bank¬ 
ruptcy  protection  one  year  ago  —  attributes  the  remain¬ 
der  of  this  year’s  $46  million  savings  to  soft  cost  savings 
achieved  by  reducing  flight  delays.  Better  on-time  per¬ 
formance  yields  greater  customer  satisfaction  and 
increases  the  airline’s  repeat  business,  for  example. 

United  earned  the  No.  1  on-time  performance  ranking 
among  major  U.S.  airlines  in  2002,  according  to  the  U.S. 
Department  of  Transportation’s  Air  Travel  Consumer 
Report.  The  airline  is  on  track  to  repeat  its  success  in 
2003,  Byrne  says.  The  TimesTen  technology  has  been  a 
factor  in  helping  United  earn  the  top  ranking,  he  says. 

The  TimesTen  system  replaces  United’s  home-brewed 
in-memory  cache,  which  the  airline  is  in  the  process  of 
phasing  out. 

United  built  its  old  in-memory  system  on  top  of  its  core 
legacy  s>'stems,  which  were  developed  over  30  years  to 
handle  the  airline’s  operations.  The  10-year-old  propri- 
etar>'  in-memory  database  helped  United  more  easily  get 
at  the  information  contained  in  its  legacy  systems,  but 
maintenance  was  problematic,  Byrne  says.“lt  would  get 


corrupted,  have  outage  windows  regularly  and  have  to 
be  rebuilt,”  he  says. 

Tlie  airline  started  migrating  applications  in  2001  from 
the  proprietary  in-house  system  to  take  advantage  of  the 
TimesTen  platform,  which  is  centrally  located  in  United’s 
Chicago  headquarters.  Byrne  expects  to  have  all  the  air¬ 
line’s  operational  applications  working  with  its  new  data 
store  in  the  next  six  months. 

That’s  good  news  for  the  two  primary  people  responsi¬ 
ble  for  supporting  the  homegrown  package,  Byrne  says. 
“They’ve  been  on  pager  duty  for  the  last  couple  of  years, 
24-7, 365  days  a  year”  he  says. “They  will  be  happy  to  see 
it  go  because  of  the  support  burden  it’s  placed  on  them.” 

Byrne’s  teams  take  their  time  migrating  applications. 
“It’s  nothing  you  can  rush  into,”  he  says.  “Because  it’s 
real-time  operation,  it’s  very  hard  to  simulate  a  bug.  So 
we  bring  up  the  TimesTen  system,  run  it  in  parallel  with 
the  old  system,  see  where  there  are  data  differences 
and  then  investigate  why  the  data  is  different.” 

United  plans  to  expand  its  data  store  usage  to  other 
areas,  including  baggage  handling.  The  airline’s  initial 
focus  was  on  migrating  applications  that  effected  on- 
time  performance.  In  the  future  United  will  tie  its  Galileo 
reservations  system  to  the  data  store  so  it  can  alert  pas¬ 
sengers  via  pager  if  their  luggage  winds  up  on  a  different 
flight  because  of  weather  conditions,  for  example.  “This 
way,  when  they  get  to  the  destination  airport,  they  don’t 
have  to  stand  around  and  wait  for  45  minutes,  only  to 
wait  in  line  again  at  the  baggage  service  center  to  find 
out  no  one  knows  where  their  bags  are,”  Byrne  says.  ■ 
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Introducing  Nokia  Message  Protector. 

Nokia  has  created  a  complete  purpose-built 
appliance  that  integrates  innovative  security 
technologies  including  virus  protection, 
with  unique  Nokia  filtering  software  —  known 
as  statistical  protection  —  to  deliver  new 
levels  of  enterprise  email  security.  Nokia  Message 
Proteaor  deploys  in  minutes  and  provides 
secure,  automatic  updates  to  optimize  email 


NOKIA 

Connecting  People 


system  integrity.  With  the  ability  to  process 
up  to  120,000  emails  per  hour,  and  the 
intelligence  to  control  the  content  that  enters, 
flows  through  and  leaves  your  network, 
you  can  spend  more  time  doing  things  that 
matter  —  like  getting  to  know  your  colleagues! 
If  you’d  like  more  time  to  chat,  visit 
www.nokia.com/get_a_iife/americas 
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The  real  meaning  of  CAN-SPAM 


As  I  write  this, Congress  is  just  about  to 
finish  up  the  approval  of  the  Con¬ 
trolling  the  Assault  of  Non-Solicited 
Fbrnography  and  Marketing  Act  of  2003, 
aka  the  CAN-SPAM  Act  of  2003.  The  term 


“mixed  bag”  was  coined  to  cover  things 
like  this  bill. 

On  one  hand,  the  bill  provides  potentially 
useful  tools  for  law  enforcement  to  fight 
some  types  of  spam.  On  the  other  hand,  it 
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SECURE  REMOTE  ACCESS 


If  you  have  ever  tried  to  deal  with  secure  remote  access  you 
know  what  a  challenge  it  can  be.  But  now  there  is  an  easier  way 
to  give  employees,  customers,  and  partners  secure  remote  access. 
It's  FirePass  from  F5  Networks. 


FirePass  is  a  powerful  solution  that  allows  your  users  to  get 
remote  access  to  critical  applications  and  data  from  any  Web- 
enabled  device  or  location — ^without  compromising  the  security 
of  your  network. 


FirePass  provides  simple,  secure  and  reliable  remote  access. 

•  Controls  the  level  of  application  access  based  on  the  type 
of  user  and  device. 

•  Leverages  your  existing  authentication  servers  to  validate 
and  authorize  user  access. 

•  Requires  zero  changes  to  your  existing  application  servers 
and  takes  minutes  to  deploy. 

•  Simplifies  remote  access  for  everyone  with  no  clients  to 
configure  and  little  or  no  user  training. 


Now  employees,  customers,  and  partners  can  securely  access 
authorized  applications  from  any  Web-enabled  device  at  any 
location. 


Simply  put  it's  easier. 


Learn  more  with  a  FREE  guide  to  secure  remote  access  and 
an  online  demo.  Visit  vvw.f5.com/FirePassNW  or  call 
1-866-879-41 39  today. 


specifically  makes  spam  legal  and  pre¬ 
empts  anti-spam  laws,  many  of  which  are 
much  stronger,  in  35  or  so  states. 

1  hope  that  the  congressional  title-writer 
who  came  up  with  CAN-SPAM  assumed 
that  people  would  read  the  “can"  as  mean¬ 
ing  “to  put  a  stop  to."  But  .sadly,  it  is  better 
read  to  mean  “to  be  enabled  by  lavV 

This  bill  defines  spam  as  'unsolicited 
commercial  electronic  mail  messages.’ 
Such  messages,  in  turn, are  defined  as  elec¬ 
tronic  mail  whose  primary  purpose  is  to 
advertise  a  commercial  product  or  service. 

The  bill  says  that  such  spam  is  just  fine 
as  long  as  there  is  a  working  opt-out 
mechanism  listed  in  the  message  and  as 
long  as  the  sender  address  and  e-mail 
header  information  is  not  forged.  Under 
this  bill,  every  division  of  every  one  of  the 
companies  on  earth  can  send  you  a  mes¬ 
sage  completely  legally  and  you  have  the 
power  to  go  through  some  undefined  per- 
sender  process  to  tell  the  sender  not  to  do 
it  again.  Clearly,  the  bill  was  heavily  influ¬ 
enced  by,  if  not  actually  written  by,  com¬ 
mercial  spammers. 

The  bill  has  significant  negative  value  but 
is  not  quite  worthless.The  requirements  for 
working  opt-out  mechanisms  and  un¬ 
forged  source  addresses  give  law  enforce¬ 
ment  officials  and  ISPs  (the  only  ones  per¬ 
mitted  to  sue  under  this  bill)  some  poten¬ 
tially  useful  ways  to  enforce  it.The  bill’s  ban 
on  using  third-party  computers  to  forward 
spam  without  permission  and  a  prohibi¬ 
tion  of  selling  e-mail  addresses  of  people 
who  have  opted  out  are  also  noteworthy 
But  an  example  of  the  bill’s  source  is  the 
provision  in  an  early  version  that  said 
spammers  did  not  have  to  include  a  work¬ 
ing  opt-out  mechanism  after  they  got  what 
they  interpreted  as  an  opt-in  response. 
Once  hooked,  you  could  not  get  out  — 
ever.  That  seems  to  have  been  dropped 
from  the  final  version.  ‘ 

How  useful  will  this  bill  actually  be  if  it 
ever  goes  into  effect?  A  quick  scan  of  the 
spam  I  received  in  the  last  two  days  shows 
that  one-third  of  it  would  be  totally  unaf¬ 
fected  —  it  included  Nigerian  cons  and 
other  mail  from  outside  of  the  U.S.  and  in 
languages  1  don’t  know.  Another  third 
potentially  would  be  affected  —  it  includ¬ 
ed  ads  for  body-part  enlargement,  porn 
sites  and  the  like.Tfie  final  third  definitely 
would  fall  within  the  effective  coverage  of 
the  law  —  it  included  ads  from  U.S.  cona- 
panies  for  various  things. 

There  is  no  way  this  bill  will  significantly 
reduce  the  level  of  spam,  but  it  might 
change  the  ground  rules  enough  to  give 
the  people  developing  anti-spam  software 
a  little  bit  better  chance. 

Disclaimer; The  bill  will  definitely  provide 
Harvard-trained  lawyers  with  a  source  of 
income,  but  I  did  not  ask  the  law  school  for 
its  opinion  —  the  above  definition  of  “can" 
is  mine  (and  Merriam- Webster’s). 

Bradner  is  a  consultant  with  Harvard 
University’s  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 
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But  change  is  coming  for  the  medium  enterprise 


On  February  2nd,  the  incredible  network  security  protecting  many  large 
enterprises  will  be  available  to  medium  enterprises  as  well.  To  learn 
more  call  800.638.8296  or  visit  www.netscreen.com/company/ad/feb2 
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Any  system  can  store  data. 


You  need  to  store  content. 


Training  video  is  content.  Seismic  studies  are  content.  And  so  are  CAT 
scan  images,  PDF  files,  audio  clips  and  presentations.  According  to  the 
analysts,  an  avalanche  of  content  is  about  to  land  on  top  of  your  data  center. 
Are  you  ready?  With  a  Sony  PetaSite®  data  tape  library,  you  will  be. 

Sony's  PetaSite  libraries  extend  beyond  terabytes  into  petabytes— to 
keep  abreast  of  your  growing  storage  needs.  SAIT  PetaSite  libraries 
leverage  the  world's  highest  capacity  data  cartridge'— SAIT— to  achieve 
the  highest  storage  density.  So  you  save  precious  data  center  space.  SAIT 
also  offers  the  lowest  tape  cost  per  gigabyte."  So  you  save  money.  Or 
choose  Sony's  DTF-2  PetaSite  libraries,  which  have  lightning-fast  loading 
and  file  access.  So  you  also  save  time. 


Sony  PetaSite  libraries  are  ideal  for  backup,  archiving  and  Hierarchical 
Storage  Management.  Sony  PetaBack®  and  PetaServe®  solutions  give 
you  even  greater  flexibility. 

Sony  PetaSite  libraries.  The  Work  Smart  solution  for  storing  content. 


Work  Smart.  Work  Sony. 
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VISIT  WWW.SONY.COM/DATASYSTEMS  OR  CALL  800-829-7669  FOR 
MORE  INFORMATION  ON  SONY'S  PetaSite  SOLUTIONS. 
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FCC  hears  views  on  VoIP  regulation 


■  BY  GRANT  GROSS 

WASHINGTON,  D.C.  —  The  FCC  should 
take  a  mostly  hands-off  approach  to  regu¬ 
lating  voice  over  IP  so  the  technology  can 
continue  to  mature  and  provide  con¬ 
sumers  with  a  choice  of  telephone  ser¬ 
vices,  vendors  told  regulators  last  week. 

Too  much  regulation  would  “retard  inno¬ 
vation,”  said  Jeffrey  Citron,  CEO  of  VoIP 
provider  Vonage  Holdings.  Others  called 
for  the  FCC  to  stay  out  of  regulating  prices 
for  VoIP 

But  not  everyone  agreed  how  the  FCC 
should  apply  its  light  touch.  FCC  Com¬ 
missioner  Jonathan  Adelstein  and  a  mem¬ 
ber  of  the  California  Public  Utilities  Com¬ 
mission  doubted  that  all  VoIP  phone  ser¬ 
vice  carriers  would  include  Enhanced-91 1 
service  or  pay  into  federal  and  state  uni¬ 
versal  service  funds,as  other  telephone  ser- 


■  NTT  DoCoMo  and  NEC  have  devel¬ 
oped  a  mobile  handset  that  marries 
3G  cellular  telephony  with  the  wireless 
LAN.  The  handset  is  compatible  with 
Wideband  Code  Division  Multiple 
Access  and  the  802.11b  WLAN  stan¬ 
dard,  and  is  expected  to  be  launched 
as  a  commercial  product  next  spring. 
In  WLAN  mode,  the  telephone  sup¬ 
ports  data  transmission  and,  when 
linked  to  a  corporate  IP  telephony 
server,  voice  transmission.  This  lets 
the  telephone  double  as  a  regular  cel¬ 
lular  telephone  and,  within  a  company 
wireless  network,  as  a  cordless  hand¬ 
set  and  data  modem. 

■  Sprint  PCS  and  Concourse 
Communications  Group  last  week 
announced  the  signing  of  a  Wi-Fi 
roaming  agreement.  The  pact  lets 
PCS  Wi-Fi  Access  customers  use 
Concourse  Wi-Fi  networks  at  a  num¬ 
ber  of  major  U.S.  airports.  Hot  spots 
in  terminals  at  LaGuardia  and  Min- 
neapolis-St.  Paul  International  air¬ 
ports  are  now  available,  with  Detroit 
Wayne  County  Metropolitan,  JFK  and 
Newark  Liberty  airports  expected  to 
follow  early  next  year. 


lilt’s  not  two  people  talking 
on  headsets  that  call  out  for 
regulation;  it’s  a  monopoly  that 
calls  out  for  regulation.  9  9 
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vice  providers  do,  if  not  man¬ 
dated  to  do  so.  Universal  ser¬ 
vice  funds  help  pay  for  tele¬ 
com  service  to  low-income 
areas,  rural  healthcare  pro¬ 
viders,  schools  and  libraries. 

Law  enforcement  groups 
also  have  questioned  whether 
VoIP  providers  would  comply 
with  phone-tapping  requests 
unless  required  by  FCC 
regulations. 

Regulation  is  appropriate 
when  a  monopoly  controls  a  market,  but  it 
is  not  needed  in  the  VoIP  market  because 
there  are  potentially  dozens  of  competi¬ 
tors,  said  Tom  Evsiin,  CEO  of  VoIP  vendor 
ITXC.  A  minimalist  regulatory  approach 
encourages  telecom  carriers  to  invest  in 


Voipand  VoIP  currently  is  one  of  the  largest 
areas  of  investment  in  the  sector,  he 
argued. 

“If  we  were  to  have  unnecessary  federal 
regulation  —  and  even  worse,  if  we  were  to 
have  all  kinds  of  conflicting  state  regula¬ 


tions  —  then  that  investment 
would  obviously  be  restrict¬ 
ed,”  Evsiin  added. “It’s  not  two 
people  talking  on  headsets 
that  call  out  for  regulation;  it’s 
a  monopoly  that  calls  out  for 
regulation.” 

The  FCC’s  forum  was 
scheduled  as  the  commis¬ 
sion  heads  into  a  debate  on 
how  to  regulate  Voip  which 
has  endured  little  regulatory 
oversight,  unlike  traditional 
phone  service  providers.  The  FCC  is  plan¬ 
ning  a  VoIP  rule-making  proceeding,  and 
during  the  forum  FCC  Chairman  Michael 
Powell  announced  an  FCC  Internet  Policy 
Working  Group  to  assist  commissioners  in 

See  VoIP,  page  34 


Portability's  debut  conies  up  short 


■  BY  JIM  DUFFY 

The  first  week  of  wireless  number  porta¬ 
bility  proved  to  be  underwhelming  in 
terms  of  demand,  but  technically  challeng¬ 
ing,  as  some  reports  said  carriers  failed  to 
fulfill  half  or  more  of  requested  changes. 

There  was  no  mad  rush  into  the  retail 
storefronts  of  wireless  operators  to  switch 
providers.  Analyst  firm  Mobile  Competency 
said  250,000  porting  requests  were  made  in 
the  first  week,  with  about  100,000  coming 
on  the  first  day  of  portability  Nov  24. 

The  public  is  not  very  aware  of  number 
portability  and  what  it  means, according  to 
market  tracker  RHK.  Until  recently  the 
major  wireless  carriers  were  not  publiciz¬ 
ing  portability  for  fear  of  losing  customers, 
RHK  says. 

Wireless  providers  are  focused  on 
retaining  current  customers  —  not  neces¬ 
sarily  attracting  new  ones.  In  anticipation 
of  higher  churn  from  wireless  number 
portability,  operators  have  been  offering 
attractive  rates  over  longer  periods  to  lock 
in  subscribers,  RHK  says. 

Also,  in  most  cases  there  is  a  cost  to  the 
subscriber  for  porting  numbers.  Sub¬ 
scribers  who  want  to  change  operators  will 
need  to  also  change  handsets,  because  the 
North  American  market  uses  at  least  four 
different  wireless  technologies,  according 
to  RHK  —  Code  Division  Multiple  Access 
(CDMA),  Time  Division  Multiple  Access 
(TDMA),GSM  and  i-DEN. 


Churning  point 

Current  churn  profile,  without 
wireless  number  portability. 


OA  chum  rate  of  between  1.5%  and 
3%  per  month,  per  carrier. 

G  More  than  30%  of  subscribers 
change  service  providers  each  year, 
regardless  of  whether  their  number 
can  be  ported. 

O  Average  monthly  churn  rates  for 
mobile  telephone  service  have 
remained  fairly  constant  over  the 
past  three  years. 

QThe  average  churn  in  North  America 
already  costs  the  industry  $240  to 
$350  per  change,  totaling  $900 
million  to  $1.3  billion  per  month. 

SOURCE:  RHK 


As  a  result,  the  cost  of  changing  numbers 
is  not  just  the  transaction  and  software,  but 
also  the  turnover  of  handsets  from  one 
technology  to  another. 

Nonetheless,  some  operators  noticed  an 
increase  in  volume  in  their  storefronts  last 
week.  A  Sprint  PCS  spokesman  says  traffic 
in  the  more  than  500  Sprint  stores  was 
heavier  than  normal  early  last  week. 

“There’s  more  switching  going  on  among 
consumers  rather  than  businesses,  but 
we’ve  seen  both,”  the  spokesman  says. 


Cingular  also  saw  some  higher  traffic  vol¬ 
umes  last  week  but  also  said  it’s  expected 
during  the  holiday  season,  according  to 
Adam  Vital,  Cingular’s  vice  president  of 
Wireless  Operations  and  Support.  Vital 
declined  to  disclose  the  number  of  cus¬ 
tomers  porting  but  said  some  systems 
“issues”  have  delayed  some  port  requests. 

The  operator  is  working  “around  the 
clock”  to  resolve  the  issues, Vital  says. 

AT&T  Wireless  also  ran  into  snags  last 
week.  Reports  surfaced  last  week  that  AT&T 
Wireless  was  experiencing  problems  with 
its  systems,  making  it  difficult  for  it  to  port 
new  customers  to  its  network. 

An  AT&T  Wireless  spokesman,  however, 
says  the  operator  did  not  experience  any 
system  failures  but  some  “bumps  in  the 
.  road,  as  did  all  other  service  providers.”  But 
I  AT&T  Wireless  ported  customers  to  and 
from  its  network,  he  .says. 

Mobile  Competency  says  most  carriers 
reported  porting  failure  rates  in  the  50% 
range  in  the  first  week.  Andrew  Cole,  a 
senior  vice  president  at  consulting  firm 
Adventis.says  80%  of  the  number  switches 
did  not  go  through. 

Cole  described  the  first  week  of  portabil¬ 
ity  as  “miserable.”  He  says  the  focus  of  the 
problem  is  that  carriers  haven’t  worked  out 
interoperability  issues. 

Adventis  is  advising  its  corporate  IT 
clients  to  hold  off  on  switching  providers 
until  the  end  of  the  first  quarter  of  2004  to 
let  carriers  work  out  the  kinks.  ■ 
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You’ve  got  to  love  Warren  Buffett.  Not 
because  he’s  an  investment  genius 
who’s  made  a  bazillion  dollars  bet¬ 
ting  on  down-home  businesses.  Nor  even 
because  from  all  accounts  he  appears  to 
be  a  genuinely  nice  guy  (how  many  bazil- 
lionnaires  can  you  say  that  about?). 

It’s  because  he’s  possibly  the  only  tele¬ 
com  investor  who  honestly  will  admit  that 
assessing  telcos  effectively  is  a  challenge. 
Last  month,  the  fiber-investor  sold  the 
majority  of  his  shares  in  Level  3  Commu¬ 
nications.  Reportedly  he  did  so  because,  as 
he  put  it,“l  don’t  know  how  to  value  tele 
communications  companies.” 

He’s  not  alone.  In  recent  columns  I’ve 


Rating  your  service  provider 


noted  that  most  so-called  telco  analysts 
have  their  heads  —  ahem  —  on  back¬ 
wards  when  it  comes  to  assessing  the  value 
of  telcos.  (Tliat’s  not  what  I  said,  but  the  edi¬ 
tors  at  Network  World  preferred  the  more 
tasteful  phrasing.)  Don’t  get  me  started  on 
guys  such  as  former  Salomon  Smith 
Barney  analyst  Jack  Grubman,  who  know¬ 
ingly  pumped  stocks  for  personal  profit. 
But  even  honest  analysts  don’t  understand 
how  to  determine  whether  a  telco  is  well- 
run  or  not.That  makes  things  hard  for  an  IT 
executive  who’s  trying  to  decide  whether 
an  up-and-coming  carrier  should  be 
entrusted  with  the  company’s  business. 

For  those  of  you  seeking  a  sanity  check 
on  your  telecom  providers’  financial  viabil¬ 
ity  and  business  effectiveness,  here  are  a 
few  benchmarks  to  look  for: 

•  provisioning  time.  How  long  does  it 
take  to  turn  up  a  circuit?  The  right  answer 
for  this  varies  depending  on  the  complexi¬ 
ty  of  service  required  (and  whether  or  not 


physical  infrastructure  is  already  in  place). 
However,  this  metric  is  an  important  mea¬ 
sure  of  the  effectiveness  of  a  telco’s  opera¬ 
tion  support  system  —  a  key  part  of  a 
telco’s  overall  effectiveness. 

•  Provisioning  accuracy.  What  percent¬ 
age  of  service  orders  are  provisioned  cor¬ 
rectly  from  the  get-go? 

•  Mean-time-to-respond  and  mean-time- 
to-repair  (MTTR)  for  service  outages  and 
complciints.  Telco  executives  should  have 
these  figures  at  their  fingertips  —  and  they 
shouldn’t  be  measured  in  days,  weeks  or 
months.  Overly  long  MTTR  ratings  tell  you 
the  company’s  underinvesting  in  trouble¬ 
shooting  and  support  —  or  has  an  overly 
complex  infrastructure. 

•  Revenue  per  customer  and  support 
costs  p)er  customer.  Revenue  per  customer 
tells  you  whether  you  qualify  as  a  large, 
small  or  midsize  customer  for  the  carrier. 
Support  costs  per  customer  gives  you  some 
insight  as  to  the  operating  efficiency  of  the 


WWW. 


nwfusion.com  I 


carrier.  Lower  costs  means  greater  automa¬ 
tion  and  standardization  —  good  signs. 

•  Billing  accuracy.  How  often  are  bills 
contested?  The  answer  tells  you  a  lot  about 
a  telco’s  business  efficiency 

For  all  these  metrics,  you  should  ask 
your  carrier  for  historical  trending  and 
current  figures  —  so  you  can  see  if  the 
company’s  improving.Sure,  carriers  could 
shade  the  truth,  and  in  a  perfect  world, 
these  statistics  would  be  audited  and  val¬ 
idated  externally  But  if  they  actually  are 
tracking  this  information  and  are  willing 
to  provide  you  with  it, that’s  in  and  of  itself 
positive. 

If  telecom  analysts  simply  looked  at  these 
figures,  they’d  have  an  easier  time  evaluat¬ 
ing  companies  accurately 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 
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identifying,  evaluating  and  addressing  pol¬ 
icy  issues  as  telecom  services  move  to 
Internet-based  platforms. 

SBC  and  Verizon  have  announced  VoIP 
products  within  the  past  month.  MCI  has 
announced  plans  to  shift  nearly  all  its  voice 
traffic  to  IP-based  networks  by  2005,  and 
already  has  started  to  move  voice  traffic  to 
IP  networks,  said  Michael  Gallagher,  acting 
assistant  secretary  in  the  U.S.  Department  of 


Commerce.  Last  month,  SBC’s  senior  vice 
president  and  CFO  called  VoIP  a  “threat”  to 
his  company’s  residential  phone  service 
offerings,  and  at  last  week’s  forum,  John 
Hodulik,  wireline  telecommunications  ana¬ 
lyst  at  UBS  Securities,  predicted  VoIP  would 
“significantly”  cut  into  the  regional  Bells’ 
profit  margins  in  the  next  five  years. 

“I  cannot  stress  enough  the  importance  of 
creating  a  regulatory  framework  that  will 
stand  the  test  of  time,  allowing  investors  to 
anticipate  the  winners  and  losers  based  on 
strategy  and  execution,  rather  than  unfore¬ 


seeable  changes  in  Washington,”  Hodulik 
added. 

Among  the  FCC’s  challenges  in  deciding 
what  to  regulate  is  that  VoIP  can  include  sev¬ 
eral  services  available  now,  said  Kevin 
Werbach,  founder  of  Supernova  Group,  a 
consulting  firm.  For  example,  some  instant¬ 
messaging  products  include  voice  chat 
options  and  game  consoles  include  an 
online  service  where  gamers  can  talk  to 
each  other. 

While  applying  a  broad  brush  to  all  those 
services  doesn’t  make  sense,  Werbach 


urged  the  FCC  to  move  toward  a  decision 
on  what  it  will  regulate,so  the  VoIP  industry 
knows  the  ground  rules. 

Powell  said  he  hopes  the  commission  will 
stay  away  from  most  VoIP  regulation.  “As 
one  who  believes  unflinchingly  in  main¬ 
taining  an  Internet  free  from  government 
regulation,  I  believe  that  IP-based  services 
such  as  VoIP  should  evolve  in  a  regulation- 
free  zone,"  he  said.“No  regulator,  either  fed¬ 
eral  or  state,  should  tread  into  this  area 
without  an  absolutely  compelling  justifi¬ 
cation  for  doing  so.”B 
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You  Need  Belden’s  New  DataTwist  600e  — 

The  Only  Network  Cable  That  Guarantees  Performance  Beyond  Category  6  Standards. 

Suddenly,  as  quickly  as  Category  6  cable  performance  standards  have  been  adopted,  Belden 
has  made  them  obsolete.  DataTwist  600e  DTP  networking  cable  was  developed  not  only  to  meet 
Category  6  standards,  but  also  to  provide  significant  amounts  of  headroom  above  and  beyond 
them  —  guaranteed.  It’s  the  industry’s  onlyUlP  cable  with  guaranteed  performance  to  600  MHz. 

The  secret?  Belden’s  unique,  patented  Bonded-Pair  technology  that  ensures  uniform  conductor- 
to-conductor  spacing  to  eliminate  performance-robbing  gaps  between  pairs. ..coupled  with 
the  patented  e-Spiine  design  that  provides  consistent  pair-to-pair  spacing 
by  placing  pairs  in  individuai  chambers. 

The  result: 

•  8  dB  of  Power  Sum  NEXT  headroom  over  Category  6  —  guaranteed. 

•  Nearly  5  dB  of  return  loss  improvement  over  Category  6 

at  100  MHz  —  guaranteed.  s“r'oi FEP^fion 

insulation  material  used 

•  An  attenuation  margin  over  Category  6  standards  ^  guaranteed.  in  the  plenum  produci. 

•  Positive  Power  Sum  ACR  to  460  MHZ  ^  guaranteed. 

X 

.  V 

All  of  which  means  better  and  faster  performance  for  you.  \\  v  }  f 

For  more  information  call  1-800-BELDEN-4  to  get  your  '  \  \  / 

fREE  cofiy  oUhe  DataTwist  600e  New  Product  Bulletin.  ^  \  <  /  j 

www.belden.com/networking 
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We  make  any  service  provider  network 
more  productive. 


Wireless  Technology  Research, 
Lucent  Bell  Labs 


Together,  Lucent  Worldwide  Services  and  Bell  Labs  bring  you  unrivaled  networking  expertise  and  intelligent 
tools  to  help  you  get  more  out  of  your  network.  For  example,  we  use  Ocelotf  one  of  the  tools  in  our  Network 
Optimization  Service,  to  increase  capacity  up  to  20%  on  wireless  networks.  While  still  boosting  coverage  and 
reducing  costs.  See  how  we  can  make  your  network  more  productive,  more  reliable,  and  more  secure  than  it  is 
today  at  www.lucent.com/lws. 


Networks  that  work  smarter.  Networks  that  work  harder" 


Lucent  Technologies 

Bell  Labs  Innovations 


ADVERTISEMENT 


n  Sound  Storage  Inuestment 

Yankee  Group  report  finds  users  of  VERITAS  storage  management  software 

realize  3-year  ROI  of  at  least  200%. 


As  Storage-related  expenses  chew  up  ever-larger  amounts  of  IT  budgets,  IT  executives 
looking  for  ways  to  contain  storage  costs  are  increasingly  turning  to  a  heterogeneous 
management  approach  to  help  them  rein  in  costs  while  improving  performance. 


Key  Heterogeneous  Storage 
management  Benefits 

Percent  of  Respondents 


Decreases  Number  of  Tools  Needed  63% 

■ 

-  Lowers  Storage  Management  Costs  59%  I 

Allows  Storage  Consolidation  55%  n 

Reduces  Training  Costs  49% 

Enables  Quicker 

^^^^^^^^^^ProblemResolutionT^^ 

Reduces  Downtime  42% 

Provides  Way  to  Replicate 
Storage  Best  Practices 
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SOURCE:  THE  YANKEE  GROUP, 

2003  SURVEY  OF  289  STORAGE  DECISION-MAKERS 


UERITHS  deliuers  ROI 


Customer 

3-year 

ROI 

Payback 

period 

Government  agency 

204% 

15  months 

Service  provider 

201% 

11  months 

Financial  services  company 

205%* 

1 3  months* 

*  Projected 

SOURCE:  THE  YANKEE  GROUP 

Download  the  full  report 

The  Yankee  Group  report,  “Storage 
Management  Return  on  Investment 
from  Deploying  VERITAS  Software”  is 

available  free  online.  The  report  contains  detailed 
financial  analyses  of  the  three  case  studies  men¬ 
tioned  here,  to  help  you  make  your  own  business 
case  for  heterogeneous  backup  software. 

Go  to:  www.veritas.com 

and  enter  reference  code  4391. 


That  is  but  one  of  the  key  findings  of  a  recent  study 
by  The  Yankee  Group  on  storage  management  return 
on  investment.  The  Yankee  Group,  a  research  firm 
based  in  Boston,  surveyed  289  IT  executives  at 
Global  2000  firms  for  the  study,  and  also  homed  in  on 
three  users  of  VERITAS  Software  storage  manage¬ 
ment  tools  to  determine  total  cost  of  ownership  and 
ROI  figures  for  their  VERITAS  deployments. 

The  results  present  a  rather  dramatic  case  for  the 
benefits  of  a  heterogeneous  storage  management 
approach:  A  government  agency  saw  an  ROI  of  204 
percent,  a  service  provider  realized  an  ROI  of  201 
percent  and  a  financial  services  company  expects  a 
return  of  205  percent  over  three  years  from  their 
respective  VERITAS  storage  management  software 
deployments.  The  three  companies  saw  a  payback 
period  of  15  months  or  less,  according  to  a  detailed 
financial  analysis  Yankee  Group  conducted  for  each 
of  the  three  customers. 

“All  three  sites  also  experienced  a  marked  decrease 
in  the  labor  costs  associated  with  managing  their  stor¬ 
age  operations,  reducing  the  time  necessary  to  han¬ 
dle  routine  storage  management  tasks  and  vastly 
improving  their  ability  to  manage  complex  storage 
environments,"  according  to  the  study,  written  by 
Yankee  Group  senior  analyst  Jamie  Gruener  and 
sponsored  by  VERITAS. 

Storage  budgets  make  up  10  percent  to  20  percent 
of  overall  IT  infrastructure  budgets,  prompting  more 
companies  to  establish  separate  storage  groups  with¬ 
in  their  IT  organizations,  the  study  says.  Some  48 
percent  of  the  companies  Yankee  Group  surveyed 
have  separate  storage  groups.  With  that  kind  of 
increased  emphasis  on  storage  comes  more  scrutiny 
of  storage  costs  and  interest  in  measuring  the  value 
of  storage  investments. 

Increasingly,  enterprises  are  finding  that  the  ability 
to  manage  a  multi-vendor  storage  environment  from 
a  common  platform  brings  numerous  benefits,  includ¬ 
ing  improving  productivity  for  IT  administrators.  The 
strategy  also  reduces  vendor  lock-in,  enabling  cus¬ 
tomers  to  select  management  software  independent¬ 
ly  of  their  hardware  platform,  and  to  select  the  hard¬ 
ware  that  best  fits  each  specific  backup  requirement. 
Additionally,  the  strategy  reduces  downtime,  cuts 
deployment  time  and  streamlines  management 
processes,  the  report  found. 

“The  bottom  line;  it’s  easier  and  more  cost-effective 
when  one  can  manage  storage  in  a  heterogeneous 
manner,”  the  report  states,  noting  the  strategy  is 
employed  by  more  than  50  percent  of  enterprises 
today.  “Pursuing  heterogeneous  storage  manage¬ 
ment  is  a  strategic  imperative  this  year  and  beyond.” 

Both  the  larger,  289-user  survey  and  the  in-depth 


interviews  with  the  three  VERITAS  customers 
showed  a  core  requirement  in  the  storage  manage¬ 
ment  buying  decision  is  improving  administrator  pro¬ 
ductivity.  “Whether  it  is  storage  provisioning,  manag¬ 
ing  storage  capacity  and  the  storage  network,  or 
attending  to  backups,  storage  decision-makers 
describe  how  adopting  new  storage  management 
tools  has  reduced  mundane/routine  tasks  for  admin¬ 
istrators  significantly,”  the  report  says. 

Yankee  Group’s  analysis  of  the  three  VERITAS  cus¬ 
tomers,  who  provided  detailed  financial  information 
on  the  condition  that  they  not  be  named,  illustrates 
the  savings  to  be  had. 

The  government  agency  customer  operates  a  main 
data  center  with  storage  growth  rates  of  100  percent 
per  year.  It  has  52  UNIX  servers  running  a  mix  of  IBM 
AIX  and  Sun  Solaris.  Using  VERITAS  NetBackup  to 
back  up  the  servers,  and  VERITAS  Foundation  Suite 
for  volume  management,  the  agency  estimates  it 
reduced  time  spent  on  storage  management  tasks  by 
25  percent.  Additionally,  NetBackup  enabled  the 
agency  to  use  a  tiered  backup  configuration  and  con¬ 
solidate  storage  to  four  tape  libraries,  eliminating  the 
need  for  an  estimated  11  tape  libraries,  the  report  says. 

VERITAS’  service  provider  customer,  which  offers 
application  hosting  services  for  enterprises,  had  even 
more  stringent  storage  requirements.  The  company 
operates  two  data  centers  with  a  mix  of  900  Windows, 
Linux  and  UNIX  servers  with  63TB  of  direct-attached 
storage  and  five  SANS  with  75  TB  of  capacity.  Using 
a  combination  of  VERITAS  Cluster  Sever,  VERITAS 
Database  Edition  and  NetBackup,  the  company  was 
able  to  increase  uptime  to  99.999  percent  —  the  “five 
nines”  level  that  telephony  companies  strive  to  meet. 
Its  11 -month  payback  period  was  the  shortest  of  the 
three  customers  Yankee  Group  interviewed. 

The  third  case  study  focused  on  a  financial  services 
company  with  a  highly  transactional  environment  that 
includes  20  Sun  Solaris  servers,  a  SAN  supporting 
about  10  TB  of  data  and  a  mix  of  Hewlett-Packard, 
EMC  and  Hitachi  Data  Systems  storage  systems. 
Using  the  VERITAS  Foundation  Suite,  VERITAS 
SANPoint  Control  and  VERITAS  SANPoint 
Foundation  Suite  HA,  for  failover,  the  company 
increased  its  capacity  utilization  from  25  percent  to  85 
percent.  It  also  increased  administrator  productivity 
by  about  50  percent,  the  report  says. 

In  its  conclusion,  the  Yankee  Group  report  says  cus¬ 
tomers  looking  at  storage  management  solutions 
should  consider  a  number  of  issues,  including  the 
ability  to  demonstrate  productivity  improvements  as 
well  as  a  heterogeneous  and  centralized  approach. 

“As  the  results  of  this  ROI  case  study  indicate,  VER¬ 
ITAS  software  can  provide  significant  financial  bene¬ 
fits  to  customers  deploying  storage  management  soft¬ 
ware,”  the  report  says.  “At  the  highest  level,  VERITAS 
has  demonstrated  it  can  save  customers  significant 
costs  associated  with  hardware  purchase  avoidance, 
reduced  labor  costs  due  to  higher  productivity,  as  well 
as  reduced  downtime  costs.” 


FOR  TYING  TELEWORKERS  TO  THE  ENTERPRISE 


ExpertCity  tries  to  change  its  im^e 


■  BY  TONI  KISTNER 

Everybody  knows  ExpertCity’s  GoToMy- 
PC.  Download  a  client  to  your  office  com¬ 
puter,  and  then  access  the  machine  and  all 
its  resources  remotely  from  any  Web 
browser.  So  easy  to  use,  employees  signed 
up  for  the  service  by  the  tens  of  thousands 
—  often  without  the  knowledge  or  consent 
of  network  managers.  Even  after  IT  depart¬ 
ments  started  blocking  the  GoToMyPC  site, 
users  could  ping  it  to  gain  access.  Blocking 
Internet  Control  Messaging  Protocol  traffic 
was  the  only  way  to  shut  users  down. 

What  you  might  not  know  is  that  Expert 
City’s  intent  has  always  been  to  win  over 
big  corporations.  But  when  the  start-up 
launched  GoToMyPC  five  years  ago,  it 
didn’t  have  the  resources  to  sell  to  them. So 
instead  it  relied  on  individual  employees  to 
push  the  product  into  their  firms  directly 
ExpertCity  launched  GoToMyPC  Corporate 
just  months  after  the  Personal  version, 
which  provides  user  management  features 
as  well  as  the  ability  to  block  access  to  the 
personal  version. 


■  2Wire  last  week  announced  the 
HomePortai  1000HW  and  1800HW. 

The  new  residential  gateways  extend 
the  reach  of  802.11b  wireless  net¬ 
works  by  increasing  the  gateway’s 
transmission  power  to  400  milliwatts, 
seven  times  higher  than  typical  Wi-Fi 
devices,  the  company  says.  The 
1000HW  includes  an  integrated  ADSL 
modem,  router,  one-port  10/100M  bit/ 
sec  Ethernet  switch,  firewall  and  inte¬ 
grated  802.11b  access  point.  The 
1800HW  includes  a  four- port  switch. 
Products  are  available  from  DSL 
providers. 

■  Vonage  last  week  announced  a 
low-cost  residential  broadband  phone 
service  plan  priced  at  about  $15  per 
month.  The  Vonage  Basic  plan  in¬ 
cludes  the  same  features  as  its  other 
plans,  and  includes  500  minutes  of 
local,  toll  and  long-distance  calling  in 
the  U.S.  and  Canada.  Additional  lines 
cost  $12.99  each. 


Today,  GoToMyPC  Corporate  4.0  uses 
Advanced  Encryption  Standard  and  inte¬ 
grates  with  two-factor  authentication 
schemes  such  as  SecurlD.  While  it’s  slowly 
winning  acceptance  —  mainly  in  small 
companies  with  limited  IT  support  or  in 
workgroups  with  specialized  remote 
access  needs  —  it’s  far  from  becoming  IT’s 
product  of  choice.  ExpertCity’s  biggest 
GoToMyPC  Corporate  account  is  for  2,000 
users  with  the  Texas  Department  of 
Protective  and  Regulatory  Services. 

“Historically  GoToMyPC’s  value  has  been 
to  bypass  the  security  guy  That  damaged 
ExpertCity’s  reputation  with  corporate 
clients,”  says  Zeus  Kerravala,  vice  president 
of  enterprise  infrastructure  at  The  Yankee 
Group.  “1  don’t  think  it’s  warranted  any¬ 
more.  But  people  take  a  long  time  to  forget, 
and  when  making  buying  decisions,  emo¬ 
tion  is  as  much  of  a  criteria  as  ROI.” 

ExpertCity’s  “reverse  demand”  strategy 
paid  off  at  firms  like  Jennison  and 
Associates,  a  financial  services  company  in 
New  York.  When  a  portfolio  manager 
signed  up  for  the  personal  version  18 
months  ago,  Vincent  D’Amico,  the  firm’s 
technical  services  supervisor,  denied  the 
user  access  because  the  encryption  level 
was  too  low. 

“But  the  guy  kept  busting  my  chops  about 
getting  it,  so  when  Version  2.0  came  out 
with  higher  encryption,  we  deployed  it,” 
D’Amico  says.“We  started  with  20  portfolio 
managers,  then  word  spread  and  the  next 
thing  we  knew  we  had  100.” 

Cart  driving  the  horse 

“Personal  remote-control  products  are 
good  for  diagnostics,  but  they’re  expensive 
to  scale.  For  large  numbers  of  people,  you 
have  to  start  asking  if  these  applications 
should  be  on  servers,”  says  John  Girard, 
vice  president  and  research  director  at 
Gartner. 

jennison  and  Associates  also  offers  users 
VPN  and  dial-up  remote  access,  but  most 
prefer  the  ability  to  access  their  own  desk¬ 
tops  with  GoToMyPC. “They  like  having  all 
their  desktop  icons  like  they’re  used  to. The 
portfolio  managers  here  wield  a  lot  of 
power.  Denying  them  a  product  they  can 
make  a  business  case  for  would  create  a 
conflict  between  IT  and  the  financial  peo¬ 
ple,”  he  says. 

For  Ross  McKenzie,  director  of  IS  for 
Johns  Hopkins  Bloomberg  School  of 
Public  Health  in  Baltimore,  knowledge  that 
his  users  were  downloading  GoToMyPC 
came  when  one  asked  him  if  an  ExpertCity 


GoToMyPC  pros  and  cons 

Personal  remote-control  products  such 
as  GoToMyPC  make  sense  if: 

•  Users  need  access  to  large  stores  of 
desktop  data  or  local  applications  too 
expensive  to  run  on  home  PCs. 

•  Users  have  important  desktop  data  and 
don't  want  to  risk  possibly  losing  a  laptop  PC. 

•You  need  a  simple  way  to  provide 
remote  access  to  day  extenders. 

•You  need  a  relatively  inexpensive  way 
to  roll  out  remote  access  to  a  small 
number  of  users. 


But  keep  in  mind: 

•  Workstations  need  to  be  running 
continuously. 

•  It's  overkill  if  users  only  need  access  to 
e-mail. 

•There’s  no  way  to  audit  remote  user 
activity. 

•  If  a  remote  worker’s  workstation 
crashes,  troubleshooting  might  mean  a  trip 
to  the  office. 

•  It’s  expensive  when  scaled  to  large 
numbers  of  users. 


GoToMyPC  snapshot:  2002  vs.  2003 

ExpertCity  is  making  gains  in  corporations,  but  more  than  50%  of 
its  business  still  comes  from  individual  users. 


10%  used 
GoToMyPC 
Corporate 


2002 


Number  of  corporate  clients:  140 
Number  of  Personal  users:  55,000 


10%  used 
GoToMyPC  Pro* 

30%  used 

GoToMyPC 
Corporate 


2003 


Number  of  corporate  clients:  1,500 
(plus  1,000  for  GoToMyPC  Pro) 
Number  of  Personal  users:  >100,000 


'For  small  business,  launched  this  year 


support  technician  could  take  control  of 
his  desktop  to  troubleshoot  a  problem. 
McKenzie  set  up  the  product  internally 
and  watched  the  traffic.  “We  realized  there 
wasn’t  a  good  way  to  stop  it  even  if  we 
wanted  to.  Our  firewall’s  not  that  restrictive,” 
he  says.“We’re  big  on  academic  freedom.” 

McKenzie’s  team  manages  5,000  users,  a 
mix  of  graduate  students,  faculty  and  sup¬ 
port  staff.  Most  access  e-mail  and  server 
applications  via  the  school’s  intranet,  but 
about  150  use  GoToMyPC  to  access  large 
e-mail  stores,  large  data  sets  or  statistical 
software  that  home  systems  can’t  handle. 

“It’s  not  something  we’d  use  on  5,000 
desktops,  but  some  folks  use  it  every  dayf 
McKenzie  says.  “During  a  snowstorm  last 
year  those  who  had  it  worked  from  home 
and  were  happy  More  signed  up  after  that.” 

Gartner’s  Girard  points  to  problems  with 
using  personal  remote-control  products  for 
remote  access,  such  as  the  need  to  keep 
host  systems  running  continuously.  “I  get 
calls  every  week  from  companies  that  are 


having  their  internal  corporate  networks 
shut  down  by  old  Trojans  coming  in  from 
remote  users.  If  you  keep  all  those 
machines  running  all  the  time  and  they’re 
not  protected,  they’re  vectors  for  internal 
attack,”  he  says. 

Even  though  GoToMyPC’s  datastream  is 
encrypted,  and  IT  can  monitor  who  ac¬ 
cessed  which  machines  and  when,  there’s 
no  ability  to  log  everything  the  user  does.“If 
I  want  audit-level  responsibility  and 
accountability  of  my  systems.  I’m  going  to 
have  to  control  the  product  myself,  or  the 
company  I  work  with  will  need  to  be  a  cer¬ 
tificate  authorit>f  Girard  says.  He  adds  that 
Funk  Software’s  Proxy  offers  premises- 
based  remote-control  capability  with  an 
optional  audit  server. 

ExpertCity  .says  it  might  add  audit  capa¬ 
bility  by  integrating  the  product  with 
third-party  network  security  appliances 
and  services.  Lightweight  Directory  Ac¬ 
cess  Protocol  is  planned  for  the  next 
release.  ■ 
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Farewell  complexity.  Good-bye  complications.  Hasta  la  vista  hassles.  Presenting  a  smarter  way  to  grow  your  IT 
capabilities.  Buy  a  server  that  can  grow  along  with  you.  Like  IBM  eServer™  xSeries®  systems  powered  by  Intel®  Xeon™ 
processors.  Select  models  can  scale  up  (simply)  from  1  to  16  way  and,  with  optional  VMware®  software,  can  handle 
not  just  one,  but  multiple  Windows®  or  Linux  applications  at  once.  That’s  the  flexibility  the  on  demand  world  demands. 
To  find  out  more,  visit  ibm.com/eserver/advantage 


Why  are  our  Intel  processor-based  server  sales  the  fastest-growing  in  the  world?'  Here  are  5  reasons: 


Scale  1-16  way  with  select 

IBM  Director  systems 

Linux-ready  through 

Mainframe-inspired 

24/7/365  optional  onsite 

models.  Pay  as  you  grow. 

management. 

the  entire  line. 

technologies. 

hardware  support.^ 

IDC  Sefver  Tracker  0203,  YTY  WoflrJwide  Revenue  Growth  comparing  Intel  processor-based  servers.  'Additional  charges  apply.  Standard  support  includes  next  business  day  response  in  some  countries.  IBM.  the 
e-business  logo,  eServer,  the  eServer  logo  and  xSenes  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Intel,  Intel  Inside,  the 
Intel  Inside  logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries. Windows  is  a  trademark  of  Mktrosoft  Corporat'on  in  the  United 
States,  other  countnes  or  both.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2003  IBM  Corporation.  AH  rights  reserved. 
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The  AMD  Opterori" processor,  superior  32-bit  performance  with  expanded  64-bit  capability. 

It’s  the  only  server  processor  designed  to  run  your  32-  and  64-bit  applications  simultaneously  and  without  compromise. 
AMD  Opteron  runs  on  AMD64,  a  breakthrough  architecture  that  enables  64-bit  technology  on  the  x86  platform-creating 
a  new  class  of  computing. 


Leverage  your  existing  investments  while  preparing  for  the  future.  It’s  one  architecture 
across  your  enterprise  that  offers  industry  leading  performance  for  your  32-bit  applications,  and  doesn’t 
require  a  forklift  upgrade  as  more  64-bit  applications  emerge.  It’s  just  another  way  AMD  designs  and  builds 
processors  with  you  in  mind.  For  a  closer  look  at  the  AMD  Opteron  processor,  visit  www.amd.com/opteron 


■t  the  AMO  Arrow  logo.  AMO 
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The  world’s  highest  performing  2P  and  4P  industry  standard  servers 
are  now  powered  by  AMD  Opteron  processors.  Get  unparalleled  32-bit 
performance  and  the  ability  to  transition  seamlessly  to  64-bit  computing. 


AMD 


Opteron 
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■  AN  INSIDE  LOOK  AT  THE 
TECHNOLOGIES  AND  STANDARDS 
SHAPING  YOUR  NETWORK 


XML  appliances  speed  Web  services 


HOW  iT  WORKS 


XML  acceleration 

An  XML  acceleration  device  offloads  XML  processing 
from  applications  to  speed  performance.  Here  is  an 
exampie  of  a  device  handling  inbound  traffic. 


Application 

servers 


O  Load  balancer  receives  incoming  traffic  from  the  Internet. 

O  Load  balancer  directs  XML  traffic  to  the  XML  accelerator  appliance. 

©  XML  appliance  uncompresses,  parses,  decrypts  and  validates  XML  traffic  before  routing  it  to 
the  ri^t  application  server. 

O  XML  appliance  transforms,  validates,  encrypts  and  compresses  XML  traffic  it  receives  from 
the  application  server. 

©  XML  appiiance  sends  XML  data  to  the  load  balancer  to  be  sent  back  to  the  Internet. 


■  BY  SUNIL  GAITONDE 

XML  is  becoming  the  lingua  franca  for 
Web  services.  However,  XML’s  flexibility 
places  significant  demands  on  network 
infrastructure,  consuming  as  much  as  80% 
of  server  processing  power  to  perform 
CPU-intensive  tasks  such  as  transforma¬ 
tion,  compression  and  XML  Web  services 
security. 

XML  acceleration  is  emerging  as  a  criti¬ 
cal  technology  to  offload  XML  processing 
from  applications,  especially  in  the  form 
of  hardware-based  appliances.  Along  with 
processing  XML  data,  XML  acceleration 
helps  implement  secure  data  exchange 
and  delivers  quality  of  service  (QoS). 

An  acceleration  appliance  typically  con¬ 
sists  of  an  off-the-shelf  motherboard  and 
an  off-the-shelf  operating  system.  The 
appliances  perform  operations  such  as 
parsing,  validating,  transforming  and  com¬ 
pressing  XML  faster  than  application 
servers  because  they  are  tuned  for  spec¬ 
ific  tasks  and  can  use  the  operating  sys¬ 
tem  and  hardware  far  more  efficiently 

The  appliances  generally  are  deployed 
in  a  three-tier  architecture  in  a  data  cen¬ 
ter.  They  typically  sit  behind  firewalls, 
between  load  balancers  and  application 
servers  or  a  device  that  combines  appli¬ 
cation  server  and  Web  server  functions. 
Load  balancers  distribute  the  load 
between  acceleration  appliances  just  as 
they  distribute  it  between  Web  servers  or 
application  servers.  Application  servers 
are  the  main  producers  and  consumers  of 
XML  data  and  benefit  most  from  the 
acceleration  these  appliances  provide. 

Pick  a  direction 

XML  traffic  can  be  viewed  as  inbound  or 


outbound.  Inbound  XML  acceleration 
uncompresses,  decrypts,  validates  and 
routes  for  QoS.  XML  appliances  process 
HTTP  or  Simple  Object  Access  Protocol 
headers  or  XML  content,  and  use  configu¬ 
ration  information  to  decide  how  to  trans¬ 
form,  validate  or  uncompress  content. 

Inbound  load  balancers  are  configured 
to  select  the  appropriate  data  to  be 
switched  to  the  acceleration  appliance. 
For  example,  an  HTTP  header  on  its  way 
from  the  load  balancer  to  the  application 
server  indicates  to  the  appliance  that  the 
data  is  compressed. The  appliance  can  be 
configured  to  uncompress  the  data,  reliev¬ 


ing  the  application  server  from  executing 
CPU-intensive  uncompressing  function. 

Similarly,  for  outbound  traffic,  an  appli¬ 
ance  can  be  configured  to  transform 
content  on  the  way  from  the  application 
server  to  the  load  balancer.  As  XML  con¬ 
tent  flows  through  the  appliance,  style 
sheet  references  in  the  document  or  in 
the  configuration  are  resolved  and 
applied  to  the  document  to  transform  it 
to  HTML,  Wireless  Markup  Language  or 
another  type  of  XML. 

Additionally,  XML  appliances  can  accel¬ 
erate  encryption  and  compression  of  XML 
data,  again  through  configuring  the  load 


balancer  and  the  server.  Qften  the  appli¬ 
ances  can  run  at  wire  speed,  which  is  not 
something  that  application  servers  can 
deliver. 

Architects  responsible  for  deploying 
XML  security  run  into  management  and 
processing  issues  satisfying  XML  security 
requirements. XML  appliances  act  as  secu¬ 
rity  gateways,  which  decrypt,  authenticate 
and  authorize  inbound  traffic  and 
encrypt  and  sign  outbound  traffic.  While 
performance  might  or  might  not  improve 
in  this  case,  control  over  Web  service  data 
is  certainly  a  benefit. 

Acceleration  also  is  essential  for  QoS. 
Not  all  partners,  customers  and  transac¬ 
tions  are  treated  equally,  and  to  ensure 
QoS,  differentiation  must  be  performed 
efficiently.  It  is  necessary  to  provide  ways 
to  differentiate  traffic  through  inspecting 
inbound  and  outbound  XML  data  and 
applying  content-level  rules  to  it  before 
deciding  which  servers  should  handle  it. 
For  example,  a  retailer  that  receives  more 
than  200  million  XML  documents  a  day 
must  sort  them  based  on  the  types  of 
XML,  version  of  XML  and  the  value  of  the 
transaction. 

XML  acceleration  appliances  offload 
many  CPU-intensive  functions  from  appli¬ 
cation  servers  to  the  network.  This  lets 
companies  achieve  wire-speed  perfor¬ 
mance  at  roughly  one-tenth  of  the  cost  of 
scaling  application  servers  to  get  the 
same  level  of  performance.  Deploying  an 
XML  acceleration  appliance  helps  com¬ 
panies  avoid  the  cost  of  purchasing  and 
maintaining  more  application  servers. 

Gaitonde  is  co-founder  and  CTO  of 
Saruega.  He  can  be  reached  at  sunil@ 
saruega.com. 


Dr.  Internet  By  Steve  Blass 

We've  heard  about  a  Linux  tool  for  scanning  Win¬ 
dows  systems  for  vulnerabilities  called  Nessus.  Is 
this  a  scanner  like  Nmap  that  produces  text  output 
about  open  ports,  or  does  it  provide  more  help? 

Nessus  runs  under  X  Windows  on  Unix  and  Linux 
systems,  and  provides  a  graphical  interface  for 
security  scanning.  Nessus  provides  online  reports 
with  information  about  vulnerability  and  severity 
of  the  problem.  After  downloading  and  executing 


the  Nessus  installer  from  www.nessus.org,  you 
complete  a  few  configuration  steps  and  launch 
the  program.  Create  a  security  certificate  for 
Nessus  by  running  the  'nessus-mkcert'  program. 
Next,  define  a  user  allowed  to  use  Nessus  by  run¬ 
ning  'nessus-adduser.'  Then  run  ‘nessus-update- 
plugins’  to  ensure  you  have  the  latest  scanning 
routines,  and  start  the  Nessus  server  daemon  by 
running  ‘nessusd-D.’  Now  launch  the  Nessus  client 
by  running  ‘nessus.’  Log  on  and  work  through  the 


page  tabs  to  choose  the  types  of  scans,  identify 
the  targets,  configure  reporting  options  and 
launch  the  scan.  Nessus  will  open  a  report  window 
listing  the  hosts  scanned.  Highlighting  a  host 
name  shows  security-scan  results  for  the  host, 
and  can  include  pointers  to  repairing  the  problem. 

Blass  is  a  netux>rk  architect  at  Change@Work  in 
Houston.  He  can  be  reached  at  dr.  internet® 
changeatwork.  com. 
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We  love  tools, whether  they  are  hard¬ 
ware  or  software.  We  suspect  it  is 
something  to  do  with  that  Tim  Allen 
guy  thing.  Anyway  a  few  tools  have  landed 
on  our  desks  with  a  delightful  thud  and  we 
decided  we  needed  to  share  them. 

First  up  are  two  updates  from  Tsarfin 
Computing:  Netinfo  4.9  and  IPMonitor  4.9. 
We  mentioned  Netinfo  some  time  ago,  and 
while  it  is  essentially  the  same  tool  it  has 
been  polished. 

Netinfo  is  a  Windows  95/98/MEyNT/2000/ 
XP/2003  Swiss  army  knife  kind  of  utility 
that  provides  a  suite  of  functions  for  dis¬ 
covering  TCP/IP  network  information. 
Presented  with  a  tabbed  interface  —  one 
for  each  function  —  Netinfo  provides  tons 
of  useful  information. 

There’s  local  info  (such  as  host  name, 
user  name,  media  access  control  address 
and  IP  address);  connection  data  (active 
socket  addresses,  protocol,  address  con¬ 
nected  to  and  socket  state);  ping;  tracer- 
oute;  lookup  (which  returns  forward  and 


Swiss  army  knife  treats  for  tool  lovers 


reverse  DNS  lookups,  lists  aliases  and  pro¬ 
vides  mail  exchanger  or  MX  records);  fin¬ 
ger;  whois;  daytime  (time  from  other  net¬ 
work  hosts);  time  (time  from  time  servers); 
and  quote  of  the  day  And  you  can  retrieve 
raw  data,  including  the  header,  from  a  URL. 

Netinfo  also  can  scan  an  IP  address  range 
for  hosts;  scan  a  host  for  active  sockets;  test 
an  e-mail  address;  and,  as  if  that  weren’t 
enough,  once  you  register  the  software  (for 
a  mere  $25  for  home  use  and  $50  for  enter¬ 
prise  use)  you  can  use  the  online  services 
of  what  Tsarfin  calls  the  Web  Center. 

The  Web  Center  is  a  collection  of  news 
services  and  tools.  Many  of  these  duplicate 
the  functions  of  the  local  tools  but  run  on 
remote  servers.  This  is  useful  for  problems 
that  make  you  wonder  if  whatever  is  wrong 
with  a  machine  or  service  causing  you 
trouble  is  just  wrong  from  where  you  sit. 

Back  in  the  application  you  can  select 
and  send  URLs,  IP  addresses  and  host 
names  from  one  feature  to  another.  You 
could  run  a  traceroute,  select  one  of  the 
hops  and  send  that  to  the  lookup  function. 
You  also  can  export  data  to  Web  pages  but 
(and  this  is  our  only  complaint)  you  can’t 
copy  the  data  to  the  clipboard. 

The  other  Tsarfin  tool,  IPMonitor,  is  priced 
identically  to  Netinfo  (you  also  can  buy  the 
two  bundled  for  $40).  IPMonitor, which, like 


its  sibling,  runs  under  Windows 
95/98/ME/NT/2000/XP/2003,  can  keep  tabs 
on  the  health  of  up  to  500  network  devices 
or  services  using  TCR  User  Datagram 
Protocol  (UDP)  and  Internet  Control 
Messaging  Protocol,  and  although  IP¬ 
Monitor  is  simple  to  use,  it  is  really  quite 
powerful. 

It  can  run  as  a  system-tray  application  that 
is  loaded  on  start-up,  support  customized 
alerts  for  each  monitored  resource,  raise 
audible  alarms,  send  e-mail  alerts  and  run 
other  applications  when  server  outages  are 
detected.  It  also  provides  real-time  report¬ 
ing  and  status  logging. 

Again,  we  have  a  complaint  —  we’d  like 
to  be  able  to  establish  hierarchical  rela¬ 
tionships  between  monitored  hosts  so 
that  if,  for  example,  our  gateway  goes 
down  and  generates  an  alert,  any  other 
hosts  we  monitor  that  are  accessed 
through  that  gateway  don’t  also  raise 
alerts. 

Our  final  tool  in  this  roundup  is  Lan- 
Hound  from  Sunbelt  Software.  LanHound 
is  a  network  monitor  and  protocol  ana¬ 
lyzer  tool  for  Windows  98/NT/2000/XP 
You  can  use  LanHound  As  a  monitor  to 
baseline  your  network,  find  traffic  bottle¬ 
neck  points,  segment  your  bandwidth  by 
protocol  and  rank  hosts  by  bandwidth 


use.  LanHound’s  protocol  analysis  lets 
you  monitor  exchanges  between  devices, 
resolve  routing  and  compatibility  issues, 
and  diagnose  application  and  service 
problems.  In  short,  LanHound  is  another 
Swiss  army  knife  but  one  focused  at  a 
lower,  more  detailed  level. 

LanHound  also  offers  remote  agents  — 
software  running  on  remote  machines 
that  gather  communications  data  from 
network  segments  not  visible  locally  to 
LanHound. 

LanHound’s  decoding  abilities  are  im¬ 
pressive.  You  can  decode  by  Layer  2,  Layer 
2/3,  Layer  3-i-,  address,  TCP/UDP  port  and 
voice-over-lP  protocol;  and  you  can  filter 
packet  capture  to  include  or  exclude 
pretty  much  any  traffic  you  specify.  And 
the  reporting!  Talk  about  slice  and  dice. 

We  have  only  just  started  to  come  to 
grips  with  what  this  product  can  do,  but  it 
already  has  proven  hugely  useful  in  help¬ 
ing  us  understand  how  some  of  the  net¬ 
work  products  we’ve  looked  at  work. 

What  is  exceptionally  cool  about 
LanHound  is  that  all  this  functionality 
costs  only  $744,  including  three  remote 
agents.  What  a  deal. 

Send  a  value  packet  to  gearhead® 
gibbs.com. 


Cool 

Quick  takes 
on  high-tech  toys 
By  Keith  Shaw 


After  Comdex  and  the  holiday  gift  guide,  there  were 
.some  new  products  launched  that  got  under  the  radar 
screen.  Here’s  some  of  the  latest  stuff  we’ve  heard  about. 


Mirra  ships  personal  server 

Launched  at  this  year’s  Demomobile  conference,  the 
Mirra  Personal  Server  is  shipping  now,  the  company  says. 
Tfie  Ftersonal  Server  gives  small  office/home  office  and 
.small-business  users  a  simple  way  to  remotely  access  and 
securely  share  digital  files.The  sys¬ 
tem  includes  an  appliance  that 
saves  all  of  a  user’s  data.  Auto¬ 
matic  backup  is  provided,  so  it 
saves  a  copy  of  any  new  file.  The 
system  also  includes  the  Mirra 
Service,  which  lets  users  connect 
remotely  to  tfieir  Personal  Servers 
from  across  the  Internet  by  going 
through  a  secure  system  at 
ww'w.mirra.com. 

The  Personal  Server  comes  with 
80G  by1es  of  storage  for  $399  or 
1 20G  bvtes  of  storage  for  $499.  Go 
to  the  company’s  Web  site  for 
more  details. 

Mirra's  Personal  Server  makes  it  easy 
for  SOHO  users  to  remotely  access  and 
share  digital  files. 


Add  FM  radio  to  your  PDA 

AmbiCom  has  launched  a  new 
Compact  Flash  Type  I  card  that  lets  you 
listen  to  FM  radio  broadcasts  on  a  Pocket  PC 
device. The  $40  AmbiCom  Radio  FM-CF  card  can 
be  ordered  now  through  the  company’s  Web  site  or  at 
Amazon.com  and  Mobile  Planet  on  Dec.  lO. 

The  card  includes  stereo  earphones  and  an  audio  line-in 
port,  and  comes  with  space  for  18  preset  stations.The  card 
picks  up  stations  in  the  88-MHz  through  l08-MHz  range, 
AmbiCom  says. 


Sharp  launches  new  Zaurus  PDA 

Sharp  recently  announced  its  new  Linux-based  PDA,  the 
Zaurus  SL-6000,  which  the  company  says  will  be  “corpo- 
ratesolutions-read>(’with  features  such  as  integrated  Wi-Fi 
(802. 1  lb  wireless  LAN), and  Linux  and  Java  application 
compatibility  The  PDA  is  expected  to 
be  available  in  the  first  quarter  of 
next  year.  Pricing  was  not 
announced. 

Features  of  the  new  PDA 
include  64M  bytes  of 
protected  flash  mem¬ 
ory  and  SDRAM,  an 
Intel  Xscale  400-MHz 
processor  and  an  inte¬ 
grated  qwerty  keypad. 

An  optional  jacket  will  be 
available  to  accommodate 
Compact  Flash  and  Secure 
Digital  memory  cards.  Wide- 
area  wireless  connectivity  is 
expected  to  be  offered  through 
Sprint  with  one  of  its  CDMA  IxRTF 
Compact  Rash  cards.  Sharp  says. 


With  AmbiCon's  new  card,  you  can  listen  to 
FM  radio  on  a  Pocket  PC. 


Sharp  is  working  with  IBM  to  create  applica¬ 
tions  for  the  PDA,  including  a  mobile  field  force 
application  and  WebSphere  Everyplace  Connection 
Manager,  which  lets  mobile  employees  access  corpo¬ 
rate  data  over  different  high-speed  networks.  With  the 
WebSphere  Everyplace  Access  software,  users  can  con¬ 
nect  to  personal  information  manager'and  e-mail  applica¬ 
tions,  and  IBM’s  DB2  database,  through  the  Zaurus  PDA. 

For  more  details  on  the 
PDA,  go  to  www.my 
zaurus.com. 


Flex  your  wire¬ 
less  adapter 

logear  has  re¬ 
leased  a  USB- 
based  802.  llg 
wireless  LAN 
adapter  that  a  user 
can  “flex,”  or  rotate, 
for  the  best  possible 
radio  signal  coverage.  The 
USB  2.0  Rex  Adapter  can  be 
rotated  300  degrees  and  can  pivot 
1 80  degrees.  The  $90  adapter  is  back¬ 
ward-compatible  with  802. 1  lb  networks 
and  works  with  Windows  98  Second  Edition, 
ME, 2000  and  XP  systems. Go  to  the  logear  site  for 
details. 


Shaw  can  be  reached  at  kshaw@nww.com. 


Sharp's  SL-6000  is  aimed  at  the  corporate  PDA  user  with  Java 
and  Linux  compatibility. 


3Com 


The  Company  That  Wired 
the  Network  Now  Unwires  it 

Introducing  the  3Com®  Suite  of  802.11  Wireless  Solutions 


Imagine  untethered  network  and  Internet  access  from  anywhere  in  your 
home  or  office.  3Com®  brings  freedom  of  choice  to  wireless  with  one  of 
the  most  comprehensive  wireless  networking  suites  on  the  market  today. 

3Com  wireless  products  come  in  a  variety  of  price  points  and  are 
scalable  from  home  and  small  office  to  enterprise  solutions.  Our 
OfficeConnect®  line  for  home  and  small  offices  is  among  the  first  to 
ship  with  the  latest  802. llg  standards  and  new  256-bit  Wi-Fi  Protected 
Access  (WPA)  encryption  security. 

Our  enterprise-class  products  include  an  lla/b/g  PC  Card  with  patented 
XJACK*  antenna  and  dual-mode  upgradeable  access  points  that  offer 


you  the  freedom  to  mix  and  match  802.11  a,  b,  or  g  standards  to  meet 
different  coverage  and  bandwidth  needs,  and  featuring  the  latest  suite 
of  security  standards  enabling  customers  to  match  the  level  of  security 
to  their  specific  environments. 

Best  of  all,  every  3Com  wireless  product  is  backed  by  30  years  of  Ethernet 
networking  expertise. 

Feel  free  to  unwire  your  office.  Visit  www.3com.com/shop  today  to  find 
the  3Com  wireless  solution  that  works  best  for  you. 


Buy  a  3Com®  OfficeConnect®  1 1g  Wireless  Access  Point  or  Gateway 
and  an  OfficeConnect  11g  PC  Card,  and  qualify  for  $54  mail  in  rebate* 


3Com*  OfficeConnect®  Wireless 
1 1  a/b/g  PC  Card,  1 1g  Gateway 


3Com*  1 1  a/b/g  Wireless  PC  Card 
with  XJACK*  Antenna 
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3Com*  Wireless  Access  Point  8750 
Tri-mode.  Upgradeable. 


To  find  a  reseller  nearest  you,  go  to:  www.3com.com/locate_reseller 
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EDITORIAL 

John  Dix 

Catching  up 
with  the  Quovix 
community 


With  outsourcing  an  increasingly  hot  topic,  we  were 
curious  how  a  company  profiled  here  in  2001  was 
faring  in  its  efforts  to  build  a  community-driven 
outsource  software  business. 

lastead  of  hiring  a  legion  of  developers  to  open  the  com¬ 
pany  in  2000,  Quovix  established  a  community  of  freelance 
developers  and  created  software  that  lets  the  company 
shop  out  and  award  projects  to  this  virtual  team. 

When  we  caught  up  with  Quovix  in  September  2001,  it 
was  announcing  a  packaged  version  of  that  home-built 
project  management  software  so  other  companies  could 
use  the  collaboration  tool  to  create  and  manage  their  own 
project  teams. 

And  in  fact  some  customers  signed  on, says  Martin 
Morrow,  founder  and  CEQ.A  large  pharmaceutical  com¬ 
pany  bought  a  copy  to  harne.ss  the  energy  of  25,000  scien¬ 
tists  working  on  chemistry  problems. 

But  the  packaged  idea  in  general  fizzled,  partly  because 
collaboration  hooks  started  showing  up  in  all  kinds  of  soft¬ 
ware,  Morrow  says.  So  the  company  stopped  selling  that 
and  stuck  with  its  original  software  service  model.  And 
that,  too,  has  evolved. 

Instead  of  tty'ing  to  educate  customers  about  the  benefits 
of  community  development  —  cheaper,  faster —  Morrow 
says  he  simply  promotes  his  product  as  a  no-hassle  alterna¬ 
tive  to  offshore  outsourcing.“We  offer  benefits  that  are  simi¬ 
lar  to  going  offshore,  but  you’re  not  really  going  offshore.” 

Morrow  says  he  can  deliver  software  for  20%  to  30%  less 
than  most  in-house  shops  because  his  stable  of  1,400  free¬ 
lance  developers  have  experience  with  a  range  of  prob¬ 
lems,  reducing  development  time.  When  a  new  project 
comes  in  it  is  posted  for  the  community  to  review,  and  peo¬ 
ple  with  the  appropriate  talents  swarm  on  it,  what  he  calls 
swarm  sourcing. 

17ie  ability  to  get  the  attention  of  so  many  developers 
aLso  means  Quovix  is  good  at  solving  the  thorniest  prob- 
lems.“Someone  is  bound  to  have  experience  with  anything 
we  see,”  Morrow  siiys. 

.And,  as  it  turns  out,  the  community  approach  is  good  for 
the  smallest  jobs.  Quovix  has  set  up  sub-communities  that 
are  good  at  things  such  as  Java  and  feeds  them,  on  a  rotat¬ 
ing  basis,  micro  projects  that  take  a  few  hours.  Customers 
win  because  they  normally  can’t  find  anyone  willing  to 
take  on  small  projects,  and  Quovix  developers  get  a  steady 
enough  stream  of  small  jobs  to  make  it  worth  their  while. 

How  is  it  all  working  out?  Morrow  says  project  volume 
has  tripletl  in  the  past  six  months  and  “has  gotten  us  to 
\‘’rg<^  of  profitability' Now  if  he  can  only  get  the  attention 
■  >f  all  thtase  folks  turning  their  gaze  overseas. 

—  John  Dix 
Editor  in  chief 
jdix@nww.  com 
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Disruptive  technology 

Howard  Anderson’s  column  “The  ultimate  disruptive 
technology”  (www.nwfusion.com,  DocFinder:  8823) 
contains  good  observations,  but  they  are  just  the 
beginning.  IP  is  really  the  disruptive  technology 

As  the  days  of  circuit-switched  telephony  are 
numbered,  so  are  the  days  of  long-distance  tele¬ 
phony,  circuit-switched  ISPs,  analog  cable  televi¬ 
sion  and  analog  broadcast  television.  What  we 
need  is  Gigabit  Ethernet  to  businesses,  institutions 
and,  eventually,  homes. 

The  roller  coaster  rides  for  telecom  providers  are 
still  not  over. 

David  Devereaux-Weber 
Network  engineer 
Division  of  IT 
University  of  Wisconsin-Madison 

Toward  the  end  of  Howard  Anderson’s  column  “The 
ultimate  disruptive  technology’  he  states,“Five  years 
from  now.you  still  might  have  a  circuit-switched  tele¬ 
phone  in  your  house,  one  that  does  not  need  exter¬ 
nal  electricity  —  a  ‘life  line’  phone  that  you  keep  in 
the  closet  and  for  which  you’ll  pay  $9  per  month  but 
hardly  ever  will  use.”  It  would  be  more  accurate  to 
state  that  we  will  use  cell  phones  for  this  purpose.  If 
we  simply  have  the  cell  phone  with  no  service  sub¬ 
scription, 911  calls  will  still  get  through.  In  my  com¬ 
munity  the  local  senior  citizens’  organization  has 
asked  people  to  donate  older  cell  phones  so  they 
can  be  used  by  the  elderly  for  91 1  emergencies. 

Raymond  Gosselin 
Killingworth.Conn. 

Ultimate  Internet 

1  found  John  Patrick’s  story  “The  ultimate  Internet” 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief.  Network  World,  1 1 8  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  verification. 


(DocFinder:  8824)  very  insightful.  With  all  the  talk 
about  grid  computing,  1  hadn’t  thought  in  terms  of 
on-demand  ebusiness  in  real  time  that  can  enhance 
and  better  personalize  the  consumer  experience. 

1  found  interesting  Patrick’s  assertion  that  ante 
nomic  computing  and  the  virtualization  of  re 
sources  (with  its  unified  customer  interface) 
means  zero  redundancy  in  the  eyes  of  the  con¬ 
sumer  and  100%  dynamic  efficiency  in  terms  of  the 
allocation  of  needed  resources  —  on  the  fly  —  to 
meet  any  sudden,  unforeseen  increase  in  con¬ 
sumer  demand.  My  response  to  that:  Lxsvely!  And  so 
well  put. 

Some  more  statements  of  Patrick’s  1  liked: 

•  “Each  day  we  get  closer  to  a  new  phase  of  the 
Internet . .  .”1  agree  100%. 

•  “Long-distance  will  no  longer  mean  anything.” 
Amen  to  that! 

•  “. . .  information-oriented  e-businesses  will  lead 
the  charge  for  the  reemergence  of  the  application 
server  provide.”  (And  by  extension,  the  reemergence 
of  the  “dumb  computer/PC  terminal.”)  Right  on! 

•  “. . .  Linux  is  not  about  ‘free.’  It  is  about  achieving 
scalability,  reliability  and  security  So  true! 

•  “...the  underlying  operating  systems  need  to  be 
open  so  that  all  can  see  how  they  work  and  con¬ 
tribute  to  them.”  1  agree.  No  more  hocus-pocus! 
(Just  let  me  see  it  to  believe  it.) 

•  “The  open  source  model  will  also  mean  rapid 
innovation.”  Absolutely! 

•  “The  potential  of  the  Internet  is  much  greater 
than  meets  the  eye.”  For  sure! 

•  “[The  Internet]  will  ...simplify  our  lives.Tou  bet! 
If  it’s  on  the  ’Net,  you  don’t  have  to  get/buy/own  it 
and  have  it  needlessly  clutter  up  your  place. 

The  Internet  will  empower  each  of  us  so  that  we 
can  together  ensure  that  the  world  runs  better, 
more  inexpensively  (with  less  redundancy),  more 
safely  and,  most  importantly,  more  equitably 

'  Ken  Selin 

Ottawa,  Qntario 


More  online!  www.nwfusion.com  Find  out  what  readers  are  saying  about  these  and  other  topics.  DocFinder  8822 
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STRATEGY  SESSION 

Jeff  Kaplan 

When  people  look  back  at  2003, some 
might  see  it  as  the  beginning  of  an 
economic  recovery  that  sparked 
renewed  growth  in  the  IT  and  telecom  indus¬ 
tries.  However,  there  are  numerous  indicators 
that  these  industries  are  not  only  experienc¬ 
ing  renewed  life,  but  are  fundamentally  re 
creating  themselves.  It  is  very  likely  that  2003  will  be  seen  as  an  inver¬ 
sion  point  in  which  the  IT  and  telecom  industries  began  a  broad-based 
shift  from  technology-driven  to  services-led  businesses. 

This  movement  toward  service-centric  business  models  poses  new 
challenges  and  offers  new  opportunities  for  those  who  grasp  them.This 
industry  inversion  will  require  IT  and  telecom  professionals  to  swap 
old  technical  skills  for  new  business  proficiencies.  It  also  will  force  IT 
organizations,  technology  suppliers  and  telecom  carriers  to  redefine 
how  they  deliver  value  to  their  end  users  and  customers,  respectively 
On  the  enterprise  side,  IT  organizations  must  prepare  for  the  inversion 
process  by  looking  at  themselves  as  internal  service  providers  rather 
than  insulated  cost  centers,  in  order  to  respond  to  budgetary  con¬ 
straints  and  rising  end-user  discontent.  They  must  learn  how  to  pack¬ 
age,  price  and  promote  their  IT  competencies  in  corporate  business 
terms,  or  they  will  become  victims  of  an  expanding  array  of  outsourc¬ 
ing  alternatives  that  could  land  them  on  the  unemployment  line. 

Offshore  and  domestic  IT  and  business  process  outsourcing  (BPO) 
has  become  the  rule  for  a  growing  number  of  companies.  AMR 
Research  estimates  that  70%  of  energy  companies  will  have  out¬ 
sourced  all  or  part  of  their  application  development  and  application 


Preparing  for  industry  inversion 


management  in  2003,  and  utility  companies  are  increasingly  contract¬ 
ing  for  BPO  services  to  cover  their  back-office  operations. 

Meta  Group  predicts  that  nearly  every  corporation  will  outsource 
some  aspect  of  its  IT  operations  by  2006  and  on-demand  computing 
will  become  the  dominant  outsourcing  model  by  2007.  Gartner  expects 
less  than  10%  of  companies  will  have  the  appropriate  business  pro¬ 
cesses  and  governance  structures  in  place  by  2005  to  effectively  man¬ 
age  their  outsourcers  and  other  external  service  providers.  Therefore, 
companies  must  develop  better  vendor  relationship-management 
skills  and  procedures  to  get  the  most  out  of  outsourcing  arrangements. 

The  inversion  is  forcing  systems  vendors,  led  by  IBM  and  HP  to 
repackage  and  re-price  the  computing  power  of  their  products  to  offer 
more  cost-effective,  on-demand  services.  Low-cost  competitors  such  as 
Dell  must  augment  their  phone  and  online  support  with  greater  on-site 
and  remote  management  services.  Software  firms  such  as  Oracle, 
PfeopleSoft  and  SAP  must  restructure  their  traditional  licensing  agree¬ 
ments  and  re-architect  their  products  so  they  can  sell  and  deliver  host¬ 
ed  application  and  database  services.  Telecom  carriers  must  convert 
basic  bandwidth  services  into  a  comprehensive  portfolio  of  turnkey- 
managed  availability,  security  storage,  messaging  and  other  services. 

These  initiatives  should  be  at  the  top  of  every  enterprise  IT  depart¬ 
ment,  technology  supplier  and  telecom  carrier  agenda  in  2004. 
Because  in  today’s  upside-down  world,  it  is  no  longer  about  your  tech¬ 
nology  features,  but  about  how  you  deliver  business  benefits. 


This  movement 
toward  service- 
centric  business 
models  poses 
new  challenges 
and  offers  new 
opportunities  for 
those  who  grasp 
them. 


Kaplan  is  managing  director  of  THINKstrategies,  a  consultancy  in 
Wellesley,  Mass.  He  can  be  reached  at  Jkaplan@thinkstrategies.com. 


ON  SECURITY 

Winn  Schwartau 

Large  consultancies  are  paid  a  lot  of 
money  to  provide  companies  with  in¬ 
formation  to  help  them  run  their  busi¬ 
nesses.  But  sometimes  the  statements  issuing 
forth  from  these  consultancies  has  me  ques¬ 
tioning  their  value  to  users. 

Last  month  at  the  Gartner  Symposium  and 
IT  Expo  in  Sydney,  Australia,  Rich  Mogull,  Gartner’s  director  of  informa¬ 
tion  security  and  risk  research,  declared  that  cyberterrorism  is  mainly  a 
theory  He  said  we  should  “stop  running  around  being  scared  about 
these  esoteric  threats  out  there.  Let’s  look  at  protecting  ourselves  by 
closing  the  vulnerabilities  we  know  exist  and  protecting  ourselves  from 
the  attacks  that  we  know  exist.” 

Of  course  we  all  should  be  doing  the  day-to-day  diligence  of  patches, 
upgrades  and  monitoring. However, in  contrast  to  Mogull,!  contend  that 
we  should  not  be  worried  about  the  threats  we  know  about;  we  should 
worry  about  those  we  don’t  know  about. 

Cyberterrorism  is  not  a  theory:  It  is  a  fact  of  the  future,  and  that 
future  could  be  one  day,  one  month  or  three  years  out. Today’s  biggest 
cyberterrorism  threats  come  from  three  places: 

•Trusted  insiders  about  whom  we  know  next  to  nothing  yet  have  root 
control  over  critical  infrastructure  operations. 

•  The“weaponization”of  otherwise  benign  technology 
•  Advisers  who  live  by  the  “security  by  denial’”  cixiom. 

In  my  1993  book  Information  Warfare,  I  said  cyberterrorists’  motiva¬ 
tions  are  immaterial;  what’s  important  is  their  capabilities.  Further,  I 
ai^ued  that  Class  1  Information  Warfare  (personal)  was  an  emerging 
threat  that  now  has  become  a  multibillion-dollar  epidemic, primarily  in 
the  area  of  identity  theft.That  was  theory  back  then,  and  now  it  is  fact. 
Class  2  Information  Warfare  (industrial  espionage  and  criminal  acts)  is 
the  second  level  to  have  graduated  from  theory  to  fact. 

One  simple  argument  to  remember  is:  Why  would  the  bad  guys  not 
use  available  technology  in  their  endeavors?  The  answer  —  not  theory 


Another  case  of  security  by  denial 


—  is  that  they  have  adopted  the  very  technologies  that  Mogull  seems 
to  suggest  we  relegate  to  a  theoretical  junk  heap. 

Class  3  Information  Warfare  (cyberterrorism)  involves  powerful 
religio-,  narco-  and  politico-terrorists  attacking  significant  portions  of 
the  infrastructure. When  I  spoke  to  the  Joint  Chiefs  of  Staff  a  couple  of 
years  ago,  they  did  not  like  hearing  me  say,  “Generals,  you  are  no 
longer  in  command  of  your  armies,”  or  the  politically  incorrect,“Why 
are  foreign  nationals  running  significant  portions  of  the  military’s 
force  projection  systems?”  But  they  did  something  about  it. 

If  a  hospital’s  patients  records  are  altered  and  a  number  of  people  die 
from  inaccurate  prescriptions,  is  that  terrorism,  and  will  the  lawyers  sue 
the  equally  victimized  doctors?  Before  Sept.  1 1 ,  a  centuries-old  bank 
was  sold  for  pennies  to  a  national  competitor  because  of  the  sheer 
incompetence  of  an  insider.  Or  was  it  a  well-laid  plan  that  post-9/ 1 1 
could  be  considered  terrorism? 

My  biggest  problem  with  Mogull’s  statements  is  that  they  imply  we 
live  in  a  world  in  which  logic  more  than  a  decade  old  still  applies.The 
world  is  too  dangerous  and  dynamic  for  us  to  be  fixated  on  precon¬ 
ceived  notions.  For  us  to  plan  only  for  that  which  we  absolutely  know 
is  a  threat  is  a  clear  prescription  for  failure.  What  about  organizations 
that  are  implementing  wireless  infrastructure?  Are  they  preparing  a 
defense  for  v/hen  weapons  such  as  high-energy  radio  frequency  guns, 
which  use  high-power  radio  signals  to  disable  and  potentially  destroy 
targets  that  use  electronic  circuits  —  such  as  corporate  networks  and 
airplanes  —  become  mainstream?  Or  are  they  taking  Mogull’s  short¬ 
sighted  advice? 

If  he  dismisses  capability  vs.  motivation  as  our  only  indicator  of 
future  acts,  then  we  all  will  suffer  the  consequences.  But  then  again, 
that  is  only  a  theory 


I  contend  that  we 
should  not  be 
worried  about 
the  threats  we 
know  about;  we 
should  wori7 
about  those  we 
don't  know 
about 


Schwartau  is  president  of  Interpact,  a  security  awareness  consulting 
firm,  and  author  of  several  books,  including  the  recent  Pearl  Harbor 
Dot  Com.  He  can  be  reached  at  winn@interpactinc.com. 
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Crowded  field  expected 
to  thin  out  in  2004  as 
established  switch 
vendors  weigh  in. 


■  BY  LAURIANNE  MCLAUGHLIN 

he  wireless  LAN  switch  market  is  facing  a  major  shakeout  in  2004,  so  IT  execu- 
p  tives  shopping  for  802.1 1  gear  need  to  take  special  care  to  pick  an  architecture 
M  that  suits  their  long-term  plans  and  a  vendor  with  staying  power. 


The  big  buzz  these  days  is  coming  from  a  swarm 
of  start-up  WLAN  switch  vendors,  such  as 
Airespace,  Aruba  Wireless  Networks,  Trapeze 
Networks  and  Vivato.  These  companies  burst  onto 
the  scene  earlier  this  year  with  products  that  man¬ 
age  wireless  security,  radio  frequency  and  roaming 
—  three  critical  needs  that  traditional  switches 
don’t  handle.  They  are  joined  in  this  market  by  two 
established  wireless  vendors,  Proxim  and  Symbol 
Technologies. 

While  these  companies  are  shipping  products  and 
have  the  early  lead,  the  wired  switch  vendors, 
heavyweights  such  as  Cisco,  Extreme  Networks  and 
Nortel,  cU'e  coming  on  fast.  They  soon  will  catch  up 
on  features  and  will  stress  the  value  of  dealing  with 
one  vendor  for  wired  and  wireless  LAN  equipment, 
software  and  support  —  a  powerful  combination  in 
the  long  term,  analysts  say. 

So  how  will  this  all  shake  out?  “There  will  be  a  seri¬ 
ous  dropout  of  the  start-up  vendors,”  says  Ken 
Dulaney,  vice  president  of  mobile  computing  at 
Gartner.  “You  can’t  survive  on  wireless  alone.  The 
clear  winners  are  going  to  be  the  ones  with  an  estab¬ 
lished  wire  presence.” 

Some  financial  strains  already  are  starting  to  show. 
Both  Trapeze  and  Vivato  laid  off  employees  in 
recent  months,  citing  slower-than-anticipated  sales. 

On  the  other  hand,  it’s  clear  that  over  the  long  term 
the  call  for  enterprise  wireless  will  continue  to 
increcise.  Users  accustomed  to  the  convenience  of 
wireless  at  home  will  demand  it  at  work,  analysts 
say.  Plus,  95%  of  corporate  notebooks  will  ship  with 
wireless  capability  by  2005,  according  to  Meta 
Group.  So  IT  organizations  will  need  to  move  beyond 
providing  WLANs  in  spot  locations  such  as  confer¬ 
ence  rooms  and  will  need  to  develop  some  type  of 


enterprise  WLAN  strategy. 

However,  as  many  IT  departments  learned  in  early 
WlAN  rollouts,  managing  access  points  can  devour 
time  and  dollars,  and  management  woes  only 
increase  as  a  company  scales  the  technology. 

That’s  where  Airespace,  Aruba,  Proxim,  S3nnbol, 
Trapeze  and  the  others  come  in,  offering  wireless 
switches  for  centrally  managing  radio  frequency, 
security  and  roaming.  In  this  crowded  field,  Aruba 
and  Symbol  deserve  close  attention,  analysts  and 
corporate  customers  say. 

Aruba  stands  out  because  its  switch  and  access 
points  do  an  excellent  job  monitoring  the  air,  and  it 
offers  customers  more  deployment  flexibility  and 
auto-configuration  capabilities  than  some  other 
products.  Also,  Aruba’s  Layer  3  connection  means 
the  Aruba  switch  doesn’t  need  a  hard  connection  to 
access  points.  Aruba  switches  also  work  with  Wi-Fi- 
compliant  third-party  access  points,  but  to  get  the 
most  from  Aruba’s  technology,  including  features 
such  as  site  surveys  and  troubleshooting,  Aruba 
access  points  become  necessary. 

From  a  business  perspective,  an  established  ven¬ 
dor  has  built-in  advantages  over  start-ups.  A  compa¬ 
ny  such  as  Symbol  has  an  existing  customer  base, 
experience  cmd  established  relationships  with  dis¬ 
tributors,  Gartner’s  Dulaney  says. 

In  terms  of  technology.  Symbol  stands  out  because 
it  promotes  the  thinnest  access  point,  a  $200  device 
it  calls  an  access  port. 

However,  Symbol  has  financial  issues  of  its  own. 
The  company  has  had  to  restate  financial  results 
back  to  1998  because  of  what  it  calls  “numerous 
errors  and  irregularities  in  the  books  and  records  of 
the  company.” 

The  Securities  and  Exchange  Commission  and  the 


U.S.  Attorney’s  office  have  ongoing  investigations, 
and  Symbol  has  yet  to  file  its  2002  annual  report.  New 
management  is  working  to  straighten  out  the  books 
and  get  the  company  back  on  track,  and  the  latest 
unaudited  results  show  the  company  making  a  profit. 

Proxim  also  has  its  challenges.  Last  year,  Proxim 
merged  with  wireless  WAN  vendor  Western 
Multiplex  and  bought  Agere  Systems  in  order  to 
acquire  the  Orinoco  line  of  802.11  gear.  Although 
revenue  is  up  slightly,  Proxim  lost  $38.2  million  in  its 
latest  quarter  and  has  lost  $97.7  million  in  the  first 
three  quarters  of  this  year.  Proxim  stock  is  hovering 
in  the  $1.50-per-share  range,  and  a  federal  court  jury 
recently  ordered  Proxim  to  pay  an  estimated  $23 
million  in  royalties  to  Symbol  as  part  of  a  patent- 
infringement  battle  between  the  two  companies. 

In  all,  Dulaney  has  identified  more  than  20  compa¬ 
nies  in  the  WLAN  switch  market  and  predicts  that 
only  a  handful  will  survive  the  shakeout.  Some  start¬ 
ups  simply  will  run  out  of  money,  while  others  are 
likely  to  be  acquired  by  traditional  switch  vendors 
such  as  Nortel  or  3Com,  he  predicts. 

Vivato  seems  to  have  carved  out  a  unique  niche 
with  outdoor  and  long-distance  technology  —  useful 
for  applications  like  an  emergency  medical  response 
system,  says  David  Willis,  vice  president  of  technol¬ 
ogy  research  services  at  Meta  Group. 

Wake-up  call  for  the  wired  vendors 

Forced  to  address  the  wireless  switch  buzz,  Cisco 
has  crafted  a  response  —  although  not  all  products 
ship  until  2004.  Cisco’s  approach  is  to  distribute  var¬ 
ious  functions  to  the  appropriate  device,  whether 
it’s  an  access  point,  a  WLAN  switch  or  a  wired 
switch. 

While  traditional  Cisco  switches  don’t  handle  all 
the  functions  that  the  Aruba  and  Symbol  switches 
do,  products  in  Cisco’s  recently  announced 
Structured  Wireless-Aware  Network  framework  will. 

Last  month,  Cisco  announced  the  CiscoWorks 
Wireless  LAN  Solutions  Engine  (WLSE)  2.5  appliance 
along  with  an  upgrade  to  Cisco  lOS  software  that 
adds  radio  frequency  management  capabilities  — 
such  as  help  with  site  surveys  and  coverage  analy- 
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Rx:  Adventist 
chooses  Symbol 


S  reg  McGovern,  CTO  at  Adventist 
Health,  decided  to  go  with 
Symbol  Technologies  for  his  wireless 
needs,  even  though  his  company’s 
wired  network  heavily  favors  Cisco 
equipment. "It  was  a  big  step  for  us  to 
Say, ‘Well,  let’s  not  go  Cisco  for  the 
wireless  LAN,  because  Symbol  makes 
more  sense  for  the  future,’"  he  says. 

Adventist  Health,  a  faith-based  nonprofit  head¬ 
quartered  in  Roseville,  Calif.,  that  includes  16 
home-care  agencies,  two  joint-venture  retirement 
centers  and  20  hospitals  in  four  states,  is  rolling 
out  a  clinical  information  system  across  its  hos¬ 
pital  locations. 

The  pilot  WLAN  in  Portland,  Ore.,  was  installed 
in  May  and  went  live  in  July.  About  250  clinicians 
and  about  50  IT  and  corporate  employees  now 
use  the  WLAN  in  two  locations.  Eventually, 
between  2,000  to  3,000  notebook-equipped 
employees  and  2,000  PDA  users  will,  too. 

"It’s  really  our  clinical  need  for  bedside  infor¬ 
mation  that's  driving  us  into  mobility,"  Mc¬ 
Govern  says.  "How  do  I  create  an  environment 
so  a  clinician  can  run  in  with  a  notebook  or  PDA 
and  get  to  the  information  they  need  quickly,  but 
securely?" 

Adventist’s  WLAN  users  are  highly  mobile, 
from  nurses  carrying  wireless  handsets  to  doc¬ 
tors  and  other  clinicians  pushing  carts  with  note¬ 
book  PCs  on  them. This  mobility  consideration 
pushed  McGovern  toward  Symbol.  For  example, 
he’s  using  128-bit  encrypted  key  security.  With  the 
Cisco  setups  he  investigated,  as  users  hopped 
from  access  point  to  access  point,  the  encrypted 
key  had  to  be  renegotiated.  With  a  voice  applica¬ 
tion,  it  was  possible  tp  lose  the  connection. 


Symbol’s  switch  eliminated  this  issue. 

Costs  also  loomed  large  in  the  decision. 

"Symbol  was  about  one-third  of  the  cost  of  Cisco 
in  terms  of  capital  outlay,"  McGovern  says.  "The 
ongoing  work  is  where  the  savings  really  reside. 
We  have  virtually  no  ongoing  cost  with  the 
Symbol  products." 

Referring  to  Symbol’s  thin  access  point  model, 
McGovern  says,  "When  you  take  the  brains  off  the 
[access  point]  and  put  them  onto  the  switch,  you 
get  a  huge  benefit  in  terms  of  cost  and  manage¬ 
ment.  If  one  of  those  [access  points]  goes  bad,  it's 
no  big  deal.  We’ve  found  it  takes  about  15  minutes 
for  a  tech  to  configure  and  install  a  [Symbol] 
switch. That  value  stands  out  really  clearly. 

"Any  approach  where  I  move  intelligence  away 
from  the  edge  and  into  the  core  of  my  network, 
that  makes  sense —  not  just  for  wireless.  This 
gives  me  a  lot  more  flexibility,”  he  adds. 

The  upgrade  path  was  also  a  selling  point.  "If 
I’m  going  to  go  from  802.11b  to  a  to  g  and  on,  it’s 
just  a  quick  little  software  upgrade,"  McGovern 
says.  "I  don’t  have  to  buy  new  hardware  or  move 
[access  points].’’  Symbol  also  seems  to  be  trying 
to  go  the  extra  mile  in  customer  service,  he  says. 

While  Adventist  uses  four  Symbol  switches  in 
Portland  and  13  others  in  three  other  locations, 
McGovern  estimates  that  he’ll  eventually  deploy 
70  to  90  switches  across  the  company. 

Looking  ahead  to  what  he  wants  next  from 
WLAN  technology,  McGovern  says  he  would  like 
tools  that  could  warn  him  before  wireless  equip¬ 
ment  walks  out  the  door  and  help  him  locate  doc¬ 
tors  or  nurses  in  a  building  based  on  the  location 
of  PDAs. 

A  parting  tip  from  McGovern  forWLAN  imple- 
menters.’Think  big.  Plan  ahead  for  additional 
users,  and  think  more  broadly  than  one  functional 
business  need  for  the  WLAN,  he  advises.  "You 
put  it  in  for  the  clinical  stuff . . .  then  people  see 
other  uses.  It  grows  once  the  technology  is  there 
for  your  specific  tactical  need,"  he  says. 

—  Laurionne  McLaughlin 


.sis.  The  up}>rade  also  added  detection  and  blocking 
of  rogue  acce.ss  points  and  security  alerts. 

Cisco  has  voice  applications  in  mind  as  it  also 
iini^roves  roaming  capabilities.  In  2004,  look  for 
Cisco  to  extend  roaming  capabilities  so  phones  and 
other  wireless  clients  can  cross  subnets  without 
application  hiccups. 

.\mong  Cisco  solutions  that  meld  wired  and  wireless 
IAN  management,  some  functionality  will  be  added 
via  softwate.  such  as  a  wireless  aware  version  of  lOS 
that  is  due  otn  in  2(KM.  In  otlier  cases,  a  new  hardware 
comi>onent,  such  .is  a  blade  in  a  switch,  will  t)e  re- 
quiietl.  It’s  uncic.ir  yet  exactly  what  a  Cisco  setup  will 
cost,  but  price  is  imt  necessarily  the  primary  concern. 

"If  you  already  have  Cisco  as  your  vendor,  you 
li.'ive  to  ask  ymirself.  IX)  I  want  to  go  with  otiier  ven¬ 
dors,  because  I've  spent  so  mucli  time  and  effort  to 


stay  homogeneous?’”  Gartner’s  Dulaney  says. 

Take  Sovereign  Bank  in  Wyomissing,  Pa.  It  uses  the 
CiscoWorks  2.0  WLSE  and  is  beta-testing  the  2.5 
WLSE  product  with  Cisco  Aironet  access  points. 
Sovereign's  WLAN  has  15  access  points  and  about 
100  active  users;  the  WLAN  will  grow  to  include  all 
the  bank’s  notebook  users  (about  1.000),  plus  50  to 
100  PDA  users  in  the  next  couple  of  years. 

"Long-term  operational  cost  was  a  factor,"  says 
Todd  Diersheide,  a  senior  network  engineer  at 
Sovereign.  “We  are  a  large  Cisco  shop,  and  we  already 
have  a  strong  Cisco  support  team.  The  synergies 
between  the  Cisco  wired  network  devices  and  the 
Cisco  WlAN  network  devices  allow  us  to  support  the 
technology  with  minimal  investment  in  staff." 

Nortel,  like  Cisco,  is  trying  to  offer  a  range  of 
"smarts”  —  such  as  security  features  and  air  monitor¬ 


ing  —  in  its  $599  to  $899  access  points.  Plus  the  com¬ 
pany  is  producing  management  appliances  such  as 
the  Security  Switch  2250.  This  $8,000  switch  central¬ 
izes  security,  enables  roaming  across  subnets  and 
allows  radio  frequency  range  adjustments  —  but  not 
analysis  for  optimizing  performance.  Auto-configura- 
tion  capabilities  for  radio  frequency  will  come  later, 
says  Anthony  Bartolo,  Nortel’s  director,  wireless  solu¬ 
tions,  enterprise  networks.  Like  Cisco,  Nortel  sees 
markets  for  both  blade  products  and  smaller  boxes, 
Bcirtolo  says. 

Extreme  began  shipping  its  new  option,  the  Summit 
300,  in  late  September.  This  $7,000  “smart”  switch 
plugs  into  a  core  switch  or  other  wiring  closet  switch 
at  Layer  2  and/or  Layer  3.  It  can  taike  the  place  of  a 
traditional  Extreme  switch,  doing  wired  and  wireless 
management. 

Gateways  offer  third  option 

There’s  a  third  option  for  WLAN  management: 
gateways  from  companies  such  as  Bluesocket  and 
ReefEdge.  These  products  will  continue  to  provide 
compelling  options  for  customers  that  already  have 
installed  various  access  points  and  want  to  overlay 
central  security  policies  (see  a  graphic  of  the  three 
options,  page  50). 

“Bluesocket  would  be  perfect  for  say,  a  university 
where  a  bunch  of  [access  points]  have  been 
deployed,”  Dulaney  says. 

In  Bluesocket’s  Secure  Mobility  Matrix  architec¬ 
ture,  one  access  point  acts  as  a  “supermaster.”  To 
update  security  policies  or  change  access  point 
configurations,  an  IT  department  performs 
changes  on  the  supermaster  access  point,  which 
broadcasts  changes  to  all  other  access  points 
through  a  secure  tunnel  using  the  wired  backbone. 

Bluesocket’s  security  capabilities  enable  policy 
integration  that’s  role-based  down  to  time  and  place. 
For  instance,  a  hospital  might  want  to  lock  down 
access  in  a  certain  wing  at  a  certain  time. 
Bluesocket’s  quality-of-service  features  allow  allocat¬ 
ing  bandwidth  by  user,  group  or  application. 

ReefEdge’s  system  focuses  around  the  CS200 
Connect  Server  —  a  Wireless  Network  Concentrator 
as  the  compamy  calls  it  —  which  is  not  a  true  switch 
but  an  appliance  that  sits  at  the  center  of  a  corporate 
network,  addressing  security,  management  and  mobil¬ 
ity  issues.  Companion  Edge  Controller  devices  pro¬ 
vide  security  and  subnet  roaming  capabilities,  doing 
some  of  the  same  tasks  as  Bluesocket’s  boxes.  But 
configuration  and  management  is  done  from  the 
Connect  Server.  Three  versions  of  the  Edge 
Controllers  include  a  desktop  appliance  that  mcmages 
three  to  five  access  points  for  small  installation  sites; 
a  network  appliance  for  10  to  20  access  points;  and  a 
large  version  for  data  centers. 

However,  the  line  between  gateway  vendors  and 
WLAN  switch  vendors  is  starting  to  blur  a  bit. 
ReefEdge  announced  last  week  that  it  is  introducing  a 
WLAN  switch.  The  ReefSwitches  are  Layer  2/Layer  3 
devices  that  can  manage  radio  waves  and  detect 
unauthorized  access  points.  The  ReefSwitches  work 
with  third-party  access  points. 

it's  all  good 

For  IT  departments,  the  good  news  is  that  if  wire¬ 
less  capability  is  needed  immediately,  there  are  sev¬ 
eral  solid  wireless  vendors  shipping  products.  If  you 
want  to  stick  with  your  existing  wired  switch  ven¬ 
dor,  wait  a  bit  for  the  wired  players  to  catch  up. 

McLaughlin  is  a  freelance  writer  in  Littleton,  Muss 
She  cun  be  reached  at  laurianne@mindspring.com 
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Which  wireless? 

Vendors  offer  a  variety  of  WLAN  architectures  designed  to  meet  your  particular  needs. 


If  you  want  to  gain  management  control  over  existing  heterogenous 
access  points,  a  gateway  is  a  good  choice 


Laptop  Vendor  B  access  point 


Existing 
LAN  wiring 
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Vendor  C  wiring 
closet  switch 


Vendor  D  Wireless 
gateway 


Vendor  C  data 
center  switch 


If  you’re  rolling  out  wireless  for  the  first  time,  a  WLAN  switch  offers 
control  over  multiple  access  points  from  that  same  vendor. 


Laptop 


Vendor  A 
access  point 


If  you  want  to  stick  with  your  incumbent  wired  switch  provider,  expect  to  see 
wireless  functionality  spread  out  among  a  variety  of  devices,  including  access 
points,  WLAN  switches,  appliances  and  traditional  switches  with  wireless  smarts. 
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Small  MediumBusiness 


Better  Performance.  Better  Price 

The  smartest  way  to  run  your  network  , 
is  also  the  smartest  way  to  run  your  business.^  ^ 
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POWERCONNECT”  2124* *  SWITCH 


Scalable,  Affordable  Unmanaged  Switch 

•  24  Fast  Ethernet  Ports  Plus  1  Copper  Gigabit  Port 

•  1  Gigabit  Port  for  High  Speed  Connectivity  to  a  Server 

•  1-Yr  Next  Business  Day  Advanced  Exchange  Sen/ice“  Standard 


E-VALUE  Code:  20294- S11202 


Recommended  Upgrade: 

•  3-Yr  Next  Business  Day  Advanced  Exchange  Servicef  add  $49 


/VfWPOWERCONNECT”  3348*  SWITCH 


Stackable,  Enterprise  Class  Managed  Switch 

•  48  Fast  Ethernet  Ports  Plus  2  Built-In  Gigabit  Uplinks 

•  Multi-Layer  Traffic  Classification  at  Layers  2,  3,  and  4 

•  Advanced  Management  via  Browser  or  Industry-Standard  CLI 

•  3-Yr  Next  Business  Day  Advanced  Exchange  Senrice®  Standard 

as  low  as  $26/mo.,  (46  pmts”) 

*1' J  E-VALUE  Code:  20294- S11209 

Recommended  Upgrade: 

•  3-Yr  Same  Day  4-Hour  Response  24x7  Advanced  Exchange 
Service,^  add  $199 


POWERCONNECT™  5212*  SWITCH 


High-Performance,  All-Gigabit  Managed  Switch 

•  12  Copper  Gigabit  Ports  Plus  4  SFP  Fiber  Uplinks 

•  Layer-3  Aware  Class  of  Service  Prioritization 

•  Advanced  Management  via  Browser  or  Industry-Standard  CLI 

•  3-Yr  Next  Business  Day  Advanced  Exchange  Service"  Standard 

as  low  as  $32/mo.,  (46  pmtsi") 

I  ijM  E-VALUE  Code:  20294-S11211 

Recommended  Upgrade: 

•  3-Yr  Same  Day  4-Hour  Response  24x7  Advanced  Exchange 
Service"  add  $299 


POWERCONNECT™  5224*  SWITCH 


High-Performance  All-Gigabit  Managed  Switch 

•  24  Copper  Gigabit  Ports  Plus  4  SFP  Fiber  Uplinks 

•  Layer-3  Aware  Class  of  Service  Prioritization 

•  Advanced  Management  via  Browser  or  Industry-Standard  CLI 

•  3-Yr  Next  Business  Day  Advanced  Exchange  Service"  Standard 

as  low  as  $54/mo.,  (46  pmts,*) 

't*  IJJjJ  E-VALUE  Code:  20294- S11219 

Recommended  Upgrade: 

•  3-Yr  Same  Day  4-Hour  Response  24x7  Advanced  Exchange 
Sen/ice"  add  $299 


Its  a  Dell,  so  you  know  you're  going  to  save  money.  But  let's  talk  performance.  From 
standard  Fast  Ethernet  to  high-speed  Gigabit  Ethernet  over  copper  or  fiber,  Dell  PowerConnect 
switches  are  designed  to  offer  full  wire-speed  and  non-blocking  performance.  Recent  Tolly  lab 
tests  confirmed  that  the  Dell  PowerConnect  3348  outperformed  industry  leaders  by  as  much  as 
48%.  Plus,  PowerConnect  switches  are  highly  interoperable,  scalable  and  perfect  for  building 
a  first-time  network  or  expanding  an  existing  one.  So  bring  Deli's  cost-saving,  one-of-a-kind 
performance  to  your  LAN  and  start  playing  on  a  field  where  the  advantage  is  yours. 


Dell  PowerConnect  3348  Outperforms  the  Cisco  Catalyst  2950  by  48%  and 
3COM  SuperStack  3  Switch  4400  by  30%  in  Layer  2  Throughput  Tests" 
Tolly  Group  Report  #203116  -  September  2003 


Better  network  solutions. 


Easy 


Click  www.dell.com/switch  Cali  1-800-757-8420 
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Once  again,  data  is  undergoing  radical  changes.  But  this  time,  it’s  not  only  about  what  gets 
created,  it’s  where  and  how  it  is  protected.  Whether  it’s  an  individual,  workgroup,  department 
or  enterprise,  you  can  back  up  every  last  digital  bit  on  Snap  storage  and  file  server  solutions. 
Easy  to  implement,  easy  to  install  and  easy  to  manage.  In  fact,  one  out  of  every  two  Network 
Attached  Storage  installations  in  the  world  and  over  half  of  the  Fortune  500  rely  on  Snap 
servers  to  protect  their  critical  information.  1  -888-343-SNAP,  www.snapappliance.com 
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ON  SEPTEMBER  Bth?  STEME  HABER  HAD 
HIS  BUSINESS  TAKEN  FROM  HIM. 
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It  could  have  been  a  tragic  story. 


Fortunately,  Steve’s  critical  financial  data  was  backed  up  by 
a  Network  Attached  Storage  solution  from  Snap  Appliance. 
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Nortel  leads  the  way  in  VoIP  applications 
that  support  teleworkers 


Im  BY  EDWIN  MIER,  NETWORK  WORLD  GLOBAL  TEST  ALLIANCE 

P  telephony  is  extending  new  features  and  capabilities  to  mobile  employees 
and  road  warriors,  and  revolutionizing  the  way  teleworkers  connect  and  work 
with  their  counterparts  back  in  the  office. 


In  this  test  we  compared  the  telework 
offerings  of  five  leading  IP  telephony 
vendors  under  real-world  IP  WAN  con¬ 
ditions.  We  found  that  the  vendor  pack¬ 
ages  —  from  Alcatel.Avaya.  Cisco,  Mitel 
Networks  and  Nortel  —  vary  in  their 
security  infrastructure;  recommended 
equipment;  breadth  of  new  applica¬ 
tions  and  features;  price;  and  quality  of 
voice  communications. 

Kudos  to  Nortel,  the  Network  World 
Blue  Ribbon  winner  with  its  MCS  5100 
—  a  new  SIP-based  IP  PBX  and  appli¬ 
cations  platform.  Nortel  earns  high 
grades  for  its  collaboration  features, 
including  videoconferencing,  instant 
messaging,  whiteboarding  and  Web 
co-browsing. 

Avaya  and  Mitel  also  scored  well. 
While  neither  offered  as  rich  an  appli¬ 
cation  package  as  Nortel,  Avaya’s  tele¬ 
worker  package  delivers  excellent  call 
routing  and  mobility  features,  while 
Mitel’s  PC  software  included  impressive 
call-handling  capabilities.  We  also  gave 
Cisco  high  marks  for  its  call-routing 
capabilities. 

We  defined  our  review  criteria  in  four 
general  areas  (see  scorecard,  below). 

•  Telephony  features  and  collabora¬ 
tion  features. 

•  Hard  phone  and  soft  phone  perfor¬ 
mance. 

•  Configuration,  integration  of  com¬ 
ponents,  setup  and  monitoring  of  tele¬ 
worker  connections. 

•  Security  provisions  for  protecting 
the  teleworker’s  IP  connections. 


In  this  test,  each  vendor  first  had  to  set 
up  a  full  working  IP  PBX  in  our  lab. 
Then  they  had  to  set  up  whatever 
remote-site  equipment  and  software 
they  recommend  and  offer  for  telecom¬ 
muters.  A  Cisco  lOS-based  router  infra¬ 
structure  connected  the  enterprise  IP 
PBX  LAN  with  the  “remote”  teleworker 
site,  simulating  connectivity  through 
one  or  more  ISPs.  A  special  simulation 
system,  from  PacketStorm,  applied  con¬ 
sistent  WAN  impairments  to  all  passing 
voice-over-IP  (VoIP)  traffic.  (See  ‘How 
we  did  it,  page  54). 

Feature  rich 

What  features  matter  to  a  teleworker? 
We  decided  anything  that  enhances 
productivity,  lessens  the  physical  re¬ 
moteness  of  the  teleworker,  or  enables 
closer  communications  and  collabora¬ 
tion  with  fellow  workers  back  at  the 
office  was  a  good  candidate. 

Nortel’s  Multimedia  PC  Client,  with  an 
integral  component  called  the  Personal 
Agent,  addressed  all  these  areas. 
Presence  —  where  the  real-time  status  of 
workgroup  or  department  members  are 
propagated  to  all  other  members  —  is 
well  implemented  and  effective.  Other 
nice  features  are  call  routing,  which  lets 
you  define  various  call-handling  re¬ 
sponses  based  on  factors  including  who 
is  calling,  videoconferencing,  instant 
messaging  and  whiteboarding.  There’s 
even  “Web-push  co-browsing,”  where 
multiple  remote  users  can  concurrently 
browse  the  same  Web  sites. 


The 

breakdown 

li 

Nortel 

Avaya 

Cisco 

Mitel 

Alcatel 

Features  30% 

5 

4 

4 

3 

3 

Performance  30% 

4 

4 

3 

4 

4 

Configuration  20% 

4 

4 

4 

4 

4 

Security  20% 

4 

4 

4 

4 

3 

TOTAL  SCORE 

4.3 

4.0 

3.7 

3.7 

3.5 

■  Scoring  Key:  5:  Exceptional;  4:  Very  good;  3:  Average;  2:  Below  average;  1:  Consistently  subpar 
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Nortel's  collage  of  VoIP  wares 
earned  the  Network  World 
Blue  Ribbon  award  for  its 
overall  support  for  telework¬ 
ers,  as  well  as  its  outstanding  .1  A, 
collaboration  features,  includ¬ 
ing  videoconferencing.  Instant 
Messaging,  whiteboarding  and  Web  co-browsing. 
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Friends  Onllae 

The  Avaya  features,  included  in  the 
$150-per-PC  Mobility  Package,  include 
a  soft  phone  and  routing  features  that 
connect  and  transfer  calls  to  the  tele¬ 
worker’s  cell  and  home  phones. 
There’s  also  IM  and  a  unique  feature 
that  integrates  phone  numbers  em¬ 
bedded  in  Web  pages  with  the  soft 
phone,  so  you  can  click  on  and  dial 
any  phone  number  you  see  while  surf¬ 
ing  the  Web.  Other  well-done,  useful 
features  include  the  six-party  audio¬ 
conferencing  and  integration  of  the 
Avaya  applications  on  the  desktop 
with  Microsoft  Outlook. 

Mitel’s  Your  Assistant  software  pro¬ 
vides  a  more-modest  feature  set,  but 
Mitel  is  regularly  adding  more  to  the 
package.  We  were  impressed  with  the 
call-routing  capabilities;  call  logs  and 
click-on  dialing;  dynamic  audioconfer¬ 
encing  of  up  to  eight  parties;  and  the 
Quick  List  of  close  associates,  which  lets 
you  import  contacts  from  Outlook. The 
software  is  well  organized,  intuitive  and 
customizable. 

Cisco’s  features  are  distributed  over 
several  disparate  applications,  includ¬ 
ing  the  soft  phone  and  the  Cisco  Per- 


>  jiCartoiTB 

^  Enc  (CwwtKicd) 

■  ^  (AdnvOnfwnnej 

9  Omit  CCtaracle^ 

A  1^9^  ( cn  tw  rvm) 
l9lM(Qar«(ie«0 

j  9  fto6  (Corrected 
I  ^  Si^cz^  CCwxifd) 

<  09g»cB(A<frre*iWaUL) 

I  09MO(Cia««da« 

!  O  T«4(A. 


A 


sonal  Assistant.  There  is  also  access  to 
the  vendor’s  Unity  unified-message 
store  via  the  Web  interface.  Unity  pro¬ 
vides  a  text-to-speech  capability  for 
retrieving  e-mail  by  phone.  Cisco’s  call 
routing  is  among  the  richest  of  all  the 
vendors  reviewed,  providing  the 
broadest  set  of  rules-based  call  han¬ 
dling.  For  example,  you  can  have  your 
calls  go  to  voice  mail  in  the  morning 
and  then  sent  to  your  cell  phone  in  the 
afternoon.  There’s  also  a  noteworthy 
personal  address  book  tied  into  tele¬ 
phone  functions. 

Alcatel  says  it  has  several  new  mes¬ 
saging  and  collaboration  applications 
coming  out  early  next  year.  But  for 
now,  we  te,sted  the  features  of  its  soft 
phone  package,  OmniTouch  MyPhone. 
The  software  lets  the  teleworker  close¬ 
ly  associate  his  IP  soft  phone  with 
other  public  switched  telephone  net¬ 
work  (PSTN)  connections,  including 
cell  phone.  An  impressive  feature  is 
the  ability  to  pass  a  live  call  from  the 
IP  connection  to  a  PSTN  phone  if  IP 
call  quality  degrades. 
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How  we  did  it 


All  voice-over-IP  calls  we  placed  and  tested  during  this  review  had  exactly 
the  same  impairments  applied  to  them.  Our  “Internet"  profile,  based  on 
ongoing  research  of  Internet  quality-of-service  conditions,  applied  —  in 
each  direction  —  100  millisec  of  latency,  20  millisec  of  jitter,  plus  1%  of  packet 
loss,  applied  in  "bursts"  of  eight  packets  at  a  time.  Packet  loss  tends  to  be 
unpredictably  intermittent  over  the  real  Internet,  but  1%  does  represent  actual 
conditions  that  many  encounter  from  time  to  time.  And  loss  does  tend  to  occur 
in  bursts,  typically  the  result  of  a  momentarily  congested  router  interface. 

Our  test  bed  provided  a  bidirectionalT-1-capacity  connection  to  the  telecom¬ 
muter  site,  such  as  DSL  access  would  provide.  However,  in  a  worst-case  scenario, 
with  Nortel's  VPN  VoIP  connection  and  concurrent  videoconferencing,  total  band¬ 
width  consumption  barely  hit  200K  bit/sec  in  each  direction. 

The  tester  was  a  party  in  every  phone  conversation  rated  for  this  review,  typic¬ 
ally  in  the  role  of  teleworker  but  also  often  at  the  headquarters  end,  checking  to 
see  if  the  same  voice  quality  was  experienced  at  both  ends  of  the  VoIP  connection. 
Every  connection  was  rated  as  excellent,  good,  fair,  or  poor,  based  on  latency, 
voice  clarity,  and  background  noise.  Compared  to  traditional  Mean-Opinion-Score 
ratings,  this  would  loosely  equate  to:  excellent,  MOS  4.0  or  higher;  good,  3.50  to 
3.99;  fair,  3.00  to  3.49;  and  poor,  less  than  3.0. 

We  loaded  and  ran  all  the  soft  phones  on  the  same,  high-performance  Compaq/ 
HP  laptop,  running  Windows  XP,  to  ensure  an  even  playing  field.  All  the  vendors 
except  Mitel  offered  a  soft  phone  as  part  of  their  teleworker  offerings.  The  soft 
phone  setup  in  all  cases  also  used  a  fairly  inexpensive  Plantronics  headset,  which 
plugged  into  the  audio  in/out  jacks  (sound  card)  of  the  laptop.  This  is  known  to 
incur  more  latency,  compared  to  more  expensive,  USB-based  headsets,  but  it  is 
the  way  we  consistently  tested  all  the  soft  phone  contestants.  Several  of  the  ven¬ 
dors  lamented  that  they  strongly  encourage  their  soft  phone  customers  to  use 
better,  USB-based  headsets  for  improved  voice  quality. 


VoIP  performance 

As  most  of  the  teleworker  calls  we 
tested  used  standard  vocoders  and  VPN 
tunnels,  the  per-VoIP-call  WAN  band¬ 
width  consumption  was  similar  across 
the  board.  For  example,  with  the  over¬ 
head  of  the  VPN  tunnel  included,  a  typi¬ 
cal  G.71 1  call  took  about  105K  bit/sec  in 
each  direction.  A  compressed  G.729  call, 
also  through  a  VPN  tunnel,  took  about 
46K  bit/sec. 

The  exception  was  Mitel,  which  does 
not  carry  its  IP  hard  phone  Real-Time 
Protocol  (RTP)  streams  in  a  VPN  tunnel. 
The  VoIP  connection  is  authenticated 
and  the  RTP  streams  encrypted,  but  with¬ 
out  the  VPN  overhead  bandwidth  drops 
nearly  20%. 

Call  quality  varied  significantly  in  some 
cases.  Avaya’s  less-expensive  IP  phones, 
the  4602, priced  at  $195, delivered  poor-to- 
fair  call  quality  with  compressed  G.729 
vocoding.  Call  quality  with  Avaya  Model 
4620  IP  phones,  twice  the  price  of  the 
4602,  consistently  yielded  good  calls. 
Avaya  says  the  two  phone  models  imple¬ 
ment  vocoding  algorithms  differently, 
which  is  not  typically  the  case  with  VoIP 
products  from  the  same  vendor. 

Tlie  soft-phone  call  quality  was  gener¬ 
ally  worse  than  with  hard  phones.  The 
mediocre  headset  we  used  for  all  our  soft 
phone  calls  no  doubt  contributed  to  this 
result,  but  we  advise  readers  to  consider 
offering  their  teleworkers  the  option  of  an 
IP  hard  phone,  too,  even  though  they 
might  use  a  .soft  phone. 

Nortel  had  the  best  soft-phone  call  qual¬ 
ity,  with  good-to-excellent  ratings  for  both 
G.729  and  G.711.  Avaya’s  was  good  to 
excellent  with  G.729,  but  only  fair  with 
G.71 1,  which  was  surprising.  Alcatel’s  soft 
phone  yielded  fair-to-good  call  quality 
with  G.711  and  poor-to-fair  for  G.729. 
Cisco’s  soft-phone  call  quality  was  poor 
with  G.729,  but  fair  with  G.71 1.  Mitel  offers 
a  soft  phone  for  teleworkers,  but  wanted 


us  to  test  with  just  its  IP  hard  phone  at  the 
teleworker  site. 

IP  hard-phone  call  quality,  in  most  cases, 
was  good  to  excellent.  In  Mitel’s  case,  we 
rated  IP  hard  phone  call  quality  as  good 
with  G.71  l,but  perceptibly  better, good  to 
excellent,  with  G.729.  Nortel’s  hard  phones 
yielded  good-to-excellent  call  quality  in 
all  cases,  as  did  Cisco’s. 

Teleworking  through  tunnels 

We  required  vendors  to  deploy  the 
security  infrastructure  they  recommend 
to  customers  who  need  to  support  tele¬ 
workers.  IP  Security  (IPSec)-based  VPN 
tunnels  were  the  choice  in  all  cases.  Mitel 
used  VPN  tunnels  only  for  PC  connec¬ 
tions;  the  VoIP  streams  of  its  IP  hard  phone 
did  not  travel  through  VPN  tunnels.  Cisco 
and  Avaya  deployed  VPN  client  boxes  at 
the  telecommuter  site. These  devices  —  a 
Model  831  lOS-based  Secure  Router  in 
Cisco’s  case  and  SG5X  Secure  Gateway  in 
Avaya’s  case  —  include  a  multi-port 
switch,  perform  encryption  and  authenti¬ 
cation  for  a  few  concurrent  VPN  tunnels, 
as  well  as  network  address  translation, 
Dynamic  Host  Configuration  Protocol,  IP 
routing  and,  to  a  user-defined  extent,  fire¬ 
wall  processing. 

Alcatel  recommends  IPSec-based  VPN 
tunnels,  but  doesn’t  offer  its  own  VPN 
equipment.  Instead,  Alcatel  certifies  that 
its  VoIP  equipment  and  OmniPCX  will 
work  over  specific  third-party  VPN  pack¬ 
ages.  Because  the  vendor  didn’t  bring  any 
VPN  gear,  we  tried  a  low-end  Linksys 
IPSec-based  package  under  Alcatel’s  tele¬ 
worker  VoIP  connection. The  Linksys  VPN 
gear  wasn’t  on  Alcatel’s  list  of  certified 
VPN  hardware,  but  it  worked  fine. 

In  Mitel’s  case,  a  specialty  Linux-based 
server  on  the  enterprise  network,  called 
the  6010  Teleworker  Solution,  handles  all 
security  and  compression  (G.729  vo¬ 
coder)  processing  for  up  to  500  teleworker 
connections.  A  PC  at  the  teleworker  site 


runs  the  teleworker  applications  and  con¬ 
nects  through  a  VPN  tunnel  using  the 
native  Microsoft  VPN  client  software,  which 
sets  up  a  more-or-less  IPSec-based  Layer  2 
Tunneling  Protocol  secure  VPN  tunnel. 

Mitel’s  IP  hard  phone  sets  up  an  authen¬ 
ticated  and  encrypted  connection  from 
the  teleworker  to  the  6010  server.  It  is  not 
a  VPN  tunnel,  though,  so  it  avoids  the 
added  bandwidth  consumed  by  VPN 
overhead.  With  its  lower  bandwidth  and 
generally  higher  VoIP  voice  quality  —  as 
only  its  IP  hard  phones  were  tested  — 
Mitel  garnered  a  high  performance  rating. 

Nortel’s  PC  software  is  multifaceted  and 


well  engineered.  Nortel’s  VPN  client  soft¬ 
ware,  which  comes  free  as  a  component 
of  its  Contivity  VPN  hardware  package, 
handles  all  security  processing  for  both 
the  PC  with  soft  phone  and  an  optional, 
attached  IP  hard  phone,  rather  than  hav¬ 
ing  a  VPN  box  handle  it.  In  addition  to  the 
soft  phone,  Nortel’s  PC  software  package, 
called  the  Multimedia  PC  Client  v2.0,also 
includes  the  smarts  to  handle  SIP  end¬ 
point  call  processing. 

So  all  there  is  at  the  Nortel  telecom¬ 
muter  site  is  the  PC  —  running  all  of 
Nortel’s  client  software  and  soft  phone.  If 
See  Teleworker,  page  57 


Net  Results 


4,3 


BLUE 

RIBBON 

WINNER 


Nortel  Multimedia  PC  Client  v2.0 
and  optional  Model  2004  IP 
hard  phone  connected  to  a  MCS 
5100  iP-PBX  system 


4,0 


Avaya  IP  Soft  phone  and  Model 
4620  IP  phone  connected  to  a 
S8700  Communications 
ManageiHbased  IP-PBX  system 


3,7 


Cisco  IP  Soft  phone  SE  v1,1  and 
Model  7960  IP  phone  connected 
off  of  a  Call  Manager  v3,3,3- 
based  IP-PBX  system 


3,7 


Your  Assistant  v2,1  and  Model 
5220  IP  phone,  connected  to 
3300 ICP  IP-PBX  system 


RATINQ 

3,5 


OmniTouch  Unified 
Communications  MyPhone  v2,0 
connected  to  OmniPCX 
Enterprise  system 


Company:  Nortel,  www. 
norteInetworks.com  Price: 
$750  per  teleworker  site  as 
tested.  Pros:  Low-cost,  good- 
quality  videoconferencing, 
useful  collaboration  appli¬ 
cations  included;  best  soft 
phone  voice  quality;  very 
effective  call  routing  and 
workgroup  presence  propa¬ 
gation.  Cons:  Soft  phone,  PC 
applications'  ease  of  use  could 
be  improved,  background 
traffic  consumes  some 
bandwidth. 


Company:  Avaya,  www.avaya. 
com  Price:  $1,400  per 
teleworker  site  as  tested. 
Pros:  Good  soft  phone  setup 
for  optimizing  voice  quality  and 
integration  with  Outlook;  slick 
real-time  call  routing  between 
business  phone,  soft  phone, 
cell  phone  and  home  phone; 
integrates  phone  numbers 
from  browser  pages  with  soft 
phone.  Cons:  Some  IP-subnet 
limitations  with  VPN  gear; 
voice  quality  much  poorer  with 
lower-priced  IP  phones. 


Company:  Cisco,  www.cisco. 
com  Price:  $1,300  per  tele¬ 
worker  site  as  tested.  Pros: 

Rich  call-routing  capabilities, 
via  Personal  Assistant;  broad¬ 
est  range  of  supported  security 
settings  and  options;  efficient 
management  of  teleworkers' 
VoIP  access  control  and  band¬ 
width  consumption.  Cons: 

Poor  voice  quality  with  soft- 
phone,  especially  when  running 
low-bit-rate  G.729  vocoding;  j 
complexity  and  cost  of  all 
teleworker  components  is  high.  ! 


Company:  Mitel  Networks, 
www.mitel.com  Price:  $375 
per  teleworker  site  as  tested. 
Pros:  NoVPN  box  required  on 
teleworker  site;  low  bandwidth 
consumption  but  excellent 
voice  quality  with  IP  hard 
phones;  nice  Windows  applet 
for  monitoring  and  diagnosing 
teleworkerVolP  connections; 
easy-to-use  applications. 
Cons:  Same  VoIP  and  network 
settings  apply  to  all 
!  teleworkers. 


Company:  Alcatel,  www. 
alcatel.com  Price:  $300  as 
tested  with  soft  phone  per 
teleworker  site;  midrange  IP 
hard  phone  adds  $485.  Pros: 
User  can  switch  from  VoIP  to 
PSTN  during  a  call  if  IP  link 
degrades;  easy-to-use  soft 
phone;  good  integration  with 
Exchange  and  Outlook.  Cons: 
Third-party  VPN  gear  required; 
remote  IP  hard  phone  config¬ 
uration  can  be  difficult. 


PRIMARY 


You’ve  dedicated  tremendous  time  and  resources  to  safeguarding  your  company’s  mission-critical 
systems.  But  if  it  isn’t  combined  with  a  robust,  redundant  infrastructure,  the  latest  technologies, 
professional  expertise,  and  proven  processes;  you  won’t  achieve  the  levels  of  availability  and  uptime 
today’s  marketplace  demands.  That’s  why  you  need  a  SunGard  Information  Availability  strategy. 
Working  with  SunGard,  we’ll  customize  a  total  solution  that  helps  ensure  your  employees  and 
customers  have  uninterrupted  access  to  the  critical  systems  and  data  that  run  your  business,  24/7. 
Make  sure  all  your  systems  are  “go”.  To  see  how  cost  effective  an  Information  Availability  strategy 
can  be,  see  our  white  paper  prepared  by  IDC  at:  www.availability.sungard.com 
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session  back  to  headquarters  and  then 
displays  all  QoS  and  connection  details. 

|l .  not  plugged  into  the  WAN  link  (via  cable 
j  or  DSL  modem,  etc.),  the  PC  could  be 

Conclusion 

plugged  into  the  switch  port  of  the  op¬ 
tional  IP  hard  phone.  In  either  case, all  traf¬ 
fic  between  the  teleworker  site  and  the 
enterprise  network  is  protected  through 
the  Contivity  VPN  tunnel. 

The  packages  tested  could  all  success¬ 
fully  deploy  their  security  and  teleworker 
VoIP  connections  over  the  Cisco  router 
infrastructure. 

Configuration  considerations 

In  the  configuration  category  we  con¬ 
sidered  the  hard  and  soft  phone  options, 
the  integration  of  the  components,  and 
the  setup  and  monitoring  of  teleworker 
connections.While  there  was  some  diver¬ 
sity,  overall  we  rated  all  the  vendors  on  the 
same  level  in  this  category. 

We  did  not  test  Alcatel’s  teleworker  con¬ 
figuration  with  a  hard  phone,  but  the  ven¬ 
dor  does  support  a  hard  phone  and  soft 
phone  combination.  Alcatel’s  score  here 
was  compensated  by  excellent  setup  wiz¬ 
ards  for  its  soft  phone,  which  assures  opti¬ 
mum  sound  and  voice  quality 

The  ability  to  tune  Avaya’s  soft  phone  for 
optimizing  call  quality  is  also  noteworthy. 
The  administrator  and  the  teleworker  can 
readily  modify  vocoders,  even  adjust  re¬ 
ceive  and  transmit  gain  (volume)  levels. 
Avaya,  too,  lets  the  teleworker  closely  asso¬ 
ciate  the  IP  soft  phone  with  an  IP  hard 
phone,  home  phone  or  cell  phone.  The 
teleworker  can  retrieve  some  rudimentary 
real-time  quality-of-service  (QoS)  data 
from  the  soft  phone,  too. 

Cisco  recently  revamped  its  soft  phone 
structure,  going  from  the  previous  TAPI- 
based  software  to  new  code  that  directly 
interacts  via  the  Cisco  “skinny”  call-con¬ 
trol  protocol,  formally  called  SCCP  Some 
adjustments  are  clearly  still  needed,  be¬ 
cause  Cisco’s  soft  phone  call  quality 
needs  work.  Cisco’s  IP  hard  phone  perfor¬ 
mance  remains  stellar,  however.  Cisco’s 
wealth  of  security  options,  and  its  band¬ 
width  management  and  QoS  features  are 
more  extensive  than  its  IP-telephony  com¬ 
petitors.  But  all  that  functionality  leaves 
customers  with  a  lot  of  pieces  to  manage 
and  many  different  interfaces  through 
which  to  do  it. 

Nortel’s  well-structured  PC  software  in¬ 
cludes  the  video  coder/decoder,and  the 
bandwidth  required  for  the  video  por¬ 
tion  was  in  the  range  of  40K  to  80K 
bit/sec.  With  the  very  good  soft-phone 
call  quality,  an  IP  hard  phone  at  a  tele¬ 
worker  site  might  be  unnecessary,  al¬ 
though  it  still  offers  improved  connec¬ 
tion  quality. 

Mitel  didn’t  provide  its  soft  phone  for 
this  review,  but  the  vendor  does  offer  a 
version  of  its  Your  Assistant  software  that 
includes  a  soft  phone.  A  plus  for  Mitel  in 
this  category  is  its  Teleworker  Network 
Analyzer,  a  small  Windows  application 
designed  to  be  e-mailed  to  teleworkers 
from  the  administrator.  The  applet  read- 


The  leading  iP-PBX  vendors  all  have  a 
story  to  tell  for  extending  VoIP  out  to 
teleworkers.  But  their  on-site  teleworker 
packages  vary  considerably  in  equip¬ 
ment  and  configuration,  feature,  price 
and  relative  call  quality.  Soft-phone  call 
quality  was  best  with  Nortel,  followed  by 
Avaya,  Alcatel  and  Cisco.  IP  hard  phone 
call  quality  generally  was  better  and 
more  consistent  across  the  board,  al¬ 
though  there  were  noticeable  differ¬ 
ences  with  the  two  vocoders  we  tested 
and  between  Avaya’s  different  IP-hard 
phone  models. 

Avaya  and  Cisco,  prefer  a  multi-port 
VPN  box  at  the  teleworker  site,  while 
Nortel  and  Mitel  employed  PC-based 
VPN  client  software  in  our  testing. 
Qtherwise,  all  the  vendors  endorse  and 
support  IPSec-based  VPN  tunnels  for 
securing  teleworker-to-headquarters 
VoIP  connections. 

Readers  will  find  that  new  applications 
and  features,  for  conferencing  and  col¬ 
laboration,  are  the  area  where  IP-telepho- 
ny  is  delivering  the  most  tangible  —  and 
impressive  —  new  capabilities  to  tele¬ 
workers.  We  found  Nortel’s  current  offer¬ 
ings  to  be  the  most  developed  and  capa¬ 
ble  of  enhancing  the  teleworker’s  produc¬ 
tivity  and  environment.  But  competitors 
are  gaining  quickly. 

Mier  is  president  of  Mier  Communica¬ 
tions,  a  network  consultancy  and  product 
test  center  based  in  Princeton  Junction, 
N.J.  He  specializes  in  VoIP  product  analysis 
and  IP-telephony  consulting.  He  can  be 
reached  at  ed@mier.com. 


Global  Test  Allia 


■  Miepcom  is  a  member  of  the  Network 
World  Global  Test  Alliance,  a  cooperative  of 
the  premier  reviewers  in  the  network  in¬ 
dustry,  each  bringing  to  bear  years  of 
practical  experience  on  every  review,  For 
more  Test  Alliance  information,  including 
what  it  takes  to  become  a  member,  go  to 
www.nwfusion.com/aliiance. 

Other  members:  Mandy  Andress, 
ArcSec;  John  Bass,  Centennial  Networking 
Labs,  North  Carolina  State  University; 
Travis  Berkley,  University  of  Kansas; 
Jeffrey  Fritz,  University  of  California,  San 
Francisco;  James  Gaskin,  Gaskin 
Computing  Services;  Greg  Goddard, 
University  of  Florida;  Thomas  Henderson, 
ExtremeLabs;  Miercom,  network  consul¬ 
tancy  and  product  test  center;  David 
Newman.  NetworkTest;  Christine  Perey, 
Perey  Research  &  Consulting;  Barry 
Nance,  independent  consultant,  Thomas 
Powell,  PINT.  Joel  Snyder,  Opus  One, 
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Mailing  offshore  outsourcing 

How  customers  plug  the  culture  gaps  that  are  exposed  in  sending  IT  work  overseas. 


■  BY  LINDA  LEUNG 

Last  month,  staffers  at  the  IT  department  in  New  York  of  Guardian 
Life  Insurance  Company  held  a  celebration  to  mark  Diwali,  the 
Hindu  festival  of  lights.  It  was  an  opportunity  for  staffers  to  learn 
more  about  the  culture  of  their  colleagues  working  at  Guardians 
offshore  outsourcing  suppliers  in  India. 

“Since  2001,  Guardian  has  outsourced  some  of  its  application  development  and  main¬ 
tenance  work  to  three  Indian  offshore  suppliers,  Covansys,  Patni  and  NUT.  A  total  of  200 
external  software  engineers,  spread  across  Guardian’s  US.  offices  and  at  their  respective 
employers’ offshore  facilities,  work  exclusively  on  various  Guardian  software  projects.They 
supplement  Guardian’s  270-strong  in-house  software  professionals. 

The  insurance  company  has  shaved  $12.5  million  per  year  in  labor  costs  since  taking  the 
work  offshore.  Although  no  internal  IT  staffers  were  cut  in  the  move.  Guardian  no  longer 
contracts  with  the  237  external  software  consultants  in  the  US.  it  previously  retained. 

“Offshore  outsourcing  has  helped  us  be  more  rigorous  about  documenting  everything’’ 
says  Shelly  McIntyre,  second  vice  president  of  business-technology  services  at  Guardian. 
She  adds  that  Covansys  “has  brought  rigor  and  process  to  the  table.’’ 

Covansys  boasts  a  Level  5  rating  of  Carnegie-Mellon  Software  Engineering  Institute’s 
Capability  Maturing  Model  (CMM)  standard  for  software  processes. The  top-rated  Level  5 
shows  that  developers  strive  for  continuous  process  improvement  by  quantitative  feed¬ 
back  and  from  innovation. 

Likewise,  Burlington  Northern  Santa  Fe  Railway  sliced  between  12%  and  15%  from  its 
total  applications  development  costs  by  outsourcing  some  of  the  work  to  Infosys  in  India. 
Jeff  Campbell,  Burlington’s  CIO  and  vice  president  of  technical  services  in  Fort  Worth, 
Texas,  says  productivity  has  increased  because  development  work  is  being  done  24-7  by 
150  Infosys  and  450  in-house  engineers.  Burlington  also  benefits  from  Infosys’  Level  5  CMM 
rating.“Most  US.  companies  are  Level  2  or  3,”  Campbell  says. 

According  to  neoIT,a  San  Ramon,  Calif.,  provider  of  offshore  outsourcing  advisory  and 
management,organizations  should  spend  between  4%  and  8%  annually  of  the  value  of  the 
total  deal  on  managing  offshore  programs.  High  on  the  management  agenda  is  the  cross¬ 
culture  aspect.  Effective  management  isn’t  only  US.  customers  being  willing  to  get  in  for  6 
a.m.  conference  calls,  but  also  understanding  cultural  differences  to  avoid  misunder¬ 
standings. 

Atul  Vashistha,  CEO  at  neoIT,  recalls  how  one  outsourcing  customer  told  its  service  sup¬ 
plier  in  India  that  it  wanted  a  change  to  the  platform  that  was  being  developed.The  sup¬ 
plier  said  yes,  but  nothing  happened.  What  the  supplier  meant  was  “Yes,  I  hear  you,”  not, 
“Yes,  I  will  make  the  changes.” The  supplier  did  not  agree  with  the  changes  but  said  yes 
because  India’s  cultural  heritage  carries  a  reluctance  to  challenge  authority  figures. “We 
advise  clients  to  ask  their  supplier  to  repeat  their  understanding  [of  the  client’s  request] 
and  for  the  supplier  to  put  on  paper  what  they  are  going  to  do,”Vashistha  says. 

Guardian’s  managers  who  work  closely  with  the  offshore  outsourcers  meet  every  week 
to  share  lessons  learned,  such  as  the  need  to  set  proper  expectations.  Senior  managers 
from  Guardian  and  the  outsourcers  meet  monthly  to  discuss  future  applications  and  how 
the  outsourcers  fare  in  metrics  such  as  productivity,  contractor  staff  retention,  meeting 
deadlines  and  first  time  right. 

Cultural  and  business  workshops  also  help  strengthen  bonds.  U.S.  Infosys  representatives 
regularly  visit  Burlington  Northern  employees  to  talk  about  Indian  food, sports  and  geog¬ 
raphy,  while  Infosys  engineers  in  India  received  training  about  the  railway  industry  from  a 
company  in  that  country.  Project  team  members  from  both  companies  also  swapped  pho¬ 
tos  of  each  other  to  display  on  their  office  walls. 

Guardian  and  Burlington  play  host  to  representatives  from  their  suppliers  who  work  as 
on-site  relationship  managers  for  a  fixed  jjeriod  of  time.  Relationship  managers  provide 
feedback  to  both  sides  and  ensure  that  any  problems  regarding  the  outsourcing  projects 


are  resolved.  Burlington’s  Campbell  also  plans  to  visit  Infosys  in  India  next  year. 

Knowledge  transfer  is  another  important  aspect  of  offshore  project  management,  par¬ 
ticularly  if  documentation  is  lacking. Covansys  sent  a  small  team  of  engineers  to  Guardian 
who  spent  three  to  six  months  getting  up  to  speed  with  the  insurance  company’s  appli¬ 
cations  while  creating  documentation  to  supplement  Guardian’s  own. 

Companies  also  must  decide  how  to  spread  the  workload  between  in-house  and  off¬ 
shore  developers.lt  might  be  easy  to  shift  the  more  mundane  tasks, such  as  maintenance, 
to  the  third-party  but  some  in-house  engineers  might  prefer  that  sort  of  work.  At  Guardian, 
its  offshore  suppliers  spend  about  65%  of  their  time  on  new  applications  development 
work  and  35%  on  the  maintenance  tasks.The  workload  was  spread  according  to  the  inter¬ 
ests  and  skills  of  Guardian’s  in-house  and  external  engineers. 

Campbell  says  another  business  cultural  difference  is  that  some  service  providers  like  to 
regularly  rotate  their  workforce,  assigning  individuals  to  different  accounts  to  keep  their 
interest  levels  up  and  to  gain  new  skills.  He  adds  that  Infosys  manages  this  well  by  having 
the  transitioning  and  new  staff  members  work  side-by-side  for  six  weeks.  NeoIT  says  cus¬ 
tomers  should  add  in  their  contract  that  between  30%  and  40%  of  the  supplier’s  team  that 
works  for  the  client  should  never  be  reassigned  elsewhere. 

McIntyre  and  Campbell  are  very  happy  with  their  offshore  outsourcing  strategies, saying 
that  working  with  suppliers  in  India  has  helped  to  instill  a  culture  within  their  own  devel¬ 
opment  environments  that  is  high-quality  and  process-driven.  ■ 


onshore  oversight 


Dos  Donts 


According  to  neoIT,  a  provider  of  offshore  outsourcing  advisory  and 
management,  you  need  to  examine  several  areas  during  the  ongoing 
management  of  offshore  outsourcing  deals. 


Performance  management 

•  Develop  a  robust  workflow  and 
process  for  both  organizations. 

•  Assign  a  dedicated  program  manager 
on-site  and  offshore  who  represents 
the  customer. 

•  Neglect  the  transition  phase — transfer 
of  knowledge,  process  and  expect¬ 
ations  is  critical  to  offshore  success. 

Financial  management 

•  Expect  the  offshore  engagement  to 
expand  into  other  areas  of  the 
business  as  customers  recognize  the 
benefits  of  offshore  outsourcing. 

•  Plan  for  unexpected  expenses  that 
may  crop  up  during  the  engagement, 
such  as  coverage  for  cultural  holidays 
or  staff  reassignment. 

•  Expect  supplier-refund  programs  to  auto¬ 
matically  be  applied.  Monitor  your  bills. 

Contract  management 

•  Set  up  regular  compliance  meetings 
as  checkpoints  for  deliverables, 
unresolved  issues  and  service-level 
monitoring. 


•  Assume  the  contract  terms  will  be 
adhered  to  without  careful  monitoring. 

•  Forget  that  quality  depends  more  on 
process  and  governance  than  tools 
and  technology. 

Relationship  management 

•  Be  patient;  building  trust,  relation¬ 
ships  and  effective  partnerships  takes 
time. 

•  Secure  and  check  executive  sponsor¬ 
ship  throughout  the  engagement. 

•  Neglect  the  importance  of  regular 
communication,  especially  during 
times  of  transition. 

Resource  management 

•  Specify  that  between  30%  and  40%  of 
the  supplier’s  team  assigned  to  your 
project  cannot  be  reassigned  without 
your  prior  approval. 

•  Allow  two  to  three  weeks  overlap  for 
handover  to  transitioning  resources. 

•  Try  to  micro-manage  resources. 
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ireat  Financing  for  your  Home  Improvement!  Attract  Women  Like  a  Playboy.  W32/Bugbear.A  Lose  Weight  NOW  $860  transfer  to  your  accc 
Payroll  Information!  In  Order  to  be  Successful,  One  Must  Project  an  Image  of  Success!  Subscribe  Today!  FREE!  W32/BackOrifice2K  Incre 
^et  a  Mercedes  for  Yourself.  Earn  Huge  $$$  Just  for  Browsing  the  Internet!  X97Yawn.A  FW;  Good  Stuff  Click  Here  to  Win  a  42  inch  Plasm 
>10,000  Waiting  for  You!  HUGE  Savings  and  Discounts  FW:  Good  Jokes!  Natural  Breast  Enlargement  W32/Scorpina  One  Minute  Auto  Los 
\  Sexy  Body  in  Just  Days.  RE:  Request  for  a  Cleaner  Credit  W32/SQLSIammer.A  Limited  Time  Offer!  Join  us  Today!  Chat  with  singles  in  y 
■Wl:  Work  From  Home  and  Earn  Thousands  $  Viagra  Shipped  Overnight.  FREE!  Don't  Wait  Another  Day  12765  You  Are  Approved  for  a  N( 
'orward  this  Email  to  Help  a  Poor  Child  in  Need  WM/Showoff.D  Register  NOW  for  a  Free  Vacation  WM/Npad.A  $$$  Earn  your  degree  in  C 
Tee  Credits  for  Your  Pet's  Medication!  INCREDIBLE  Offer!!!  Don't  Miss  JS/Coolsite.A  RE:  Access  your  PC  Anywhere.  I've  grown  a  size  big 
!74397  Tired  of  Dating?  I  Want  Action  Now!  W32/CodeRed  RE:  Important  Meeting  on  Tuesday  564TKD  Blow  Out  Sale!  kiko.hi  there  -  $25 
’98M/Corner.A  FW:  Look  at  These  Incredible  Pics!  Start  Earning  Dollars  Today!  Sick  of  Bad  Credit?  We  Will  Help  You!  Live  A_dult  WebCa 
Vhy  Pay  More  for  a  New  Car?  Grow  it  Like  a  Man...  $$  VBS/Districts.A  Russian  Women  Looking  for  Husbands  in  your  Area  |  hair  restoratk 
^E;  New  to  Your  Area  239654EE*43  Fee!  Like  You're  18  Again!  FREE  Trials  for  Herbal  Viagra  X97M/Divi  WOW!  Out  of  Control!  NBA  pics  C 
become  a  Web  Marketing  Specialist  in  3  Days.  Low  Mortgage  Made  Easy!  University  Diplomas.  No  more  impotence!  New  3Meg  DSL  Serv 
Vin  a  Color  Laser  Printer  Win2K/Cluster.B  Your  Private  Gold  Mine  invitation  1  Premium  Red  Hot  Action  Lowest  Rates  Online...  below  5%  o 
Tivate  delivery  to  your  home  Urgent  AC  #1289  RE:  wrestling  cops  W32/ILoveU.A  world's  smallest  digital  camera  Make  some  serious  casf 


We  can. 

(By  the  way,  you  have  an  important  meeting  on  Tuesday.) 


VircoM  Rid  your  corporate  inbox  of  harassing  spam  and  viruses.  Today.  Forever. 

www.vircom.com 


sr  t/  e  fn  &  ri 


eOMPLETE  REMOTE  KVM  CONTROL  VIA  TCP/IR 


BEST  OF  INTEROP 
NETWORLD  INTEROP 


O  CRN  cMpOtWig 


2003  Winner 

of  the  Best  Of  Show  Award 


Extend  Your  IT  Reach  Beyond  The  Server  Room 


Kaveman  16  -  Allows  up  to  6  simultaneous 

users  connecting  16  servers 

n 


How  does  Kaveman  work 


a  tj  e  m  a  n 
Available  in  1,  8  and  16  channel  versions 


mnm 


Servers 


Remote  Keyboard,  Video  and  Mouse  Access  via  Web  Browser 

You  can  access  to  the  BIOS  level  of  your  servers  or  serial  devices  anytime, 
anywhere  with  full  KVM  control  via  a  Web  Browser  or  VNC. 

24/7  Automatic  Server  Monitoring 

Kaveman  monitors  server  functions  and  notifies  you  before  any  server 
problems  become  critical. 

Highly  Secure  Deployment 

Kaveman  utilizes  128-bit  SSL  encryption  for  all  keyboard  and  mouse  data 
and  supports  SSH  and  VPN  environments.  In  addition,  Kaveman  offers 
specialized  security  features  including  the  Turtle  mode  and  Stealth  mode. 

Non-IntrusiveTo  Your  Network  Environment 

As  a  stand  alone  device  that  requires  no  additional  software  or  hardware 
to  install,  Kaveman  minimizes  the  potential  impact  on  your  servers. 

Remote  Power  Cycling 

You  can  power  cycle,  turn  on/off  any  connected  device  over  IP  simply 
using  a  common  Browser. 


iz:>i  <si“ 

The  Ensiine  of  Innos^ation 


www.digitalv6.com  1-866-922-2333 


Mention  Promotion  Code  ‘NETWORK  WORLD’  when 
purchasing  the  Kaveman. 


www.SpectorCNE.com 


■  r' 


Employees  Do  On  The  Internet 


With  Spector  CNE  on  your  network,  you 
will  easily  prevent  or  eliminate  problems 
associated  with  Internet  and  PC  abuse. 

Spector  CNE  provides  an  immediate  and 
accurate  record  of  every  employee's: 


P  Emails  Sent  &  Received 


Chat/Instant  Messages 


1*9231 


Keystrokes  Typed 
Web  Sites  Visited 


^1  Programs  Launched 

VCR-like  Snapshot  Recording 


To  learn  more  about  Spector  CNE  and 
receive  a  FREE  cost  savings  analysis  for 
your  business  call  1-888-598-2788 
or  visit  www.SpectorCNE.com 


A  few  minutes  a  day  of  personal  surfing,  online  shopping  and  chatting  may  seem 
harmless,  but  consider  this... 

A  recent  study  concluded  that  employees  spend  an  average  of  75  minutes  per  day  using 
office  computers  for  non-business  related  activity  (surfing  porn,  gambling,  shopping  or 
even  searching  for  sex  online).  That  translates  into  an  annual  loss  of  $6250  per  employee 
or  more  than  $300,000  per  year  down  the  drain  for  a  company  of  just  50  employees. 

So  how  do  you  catch  guilty  employees  who  won't  admit  they  are  stealing  company  time? 

Introducing  Spector  CNE  -  Corporate  Network  Edition 

At  the  touch  of  a  button,  you  can  monitor  any  employee,  any  time,  anywhere  on  the 
network.  Spector  CNE  secretly  records  and  archives  chat  conversations,  instant  messages 
(AOL,  MSN  and  Yahoo),  emails  (including  Outlook,  Exchange,  AOL  and  web-based  mail 
like  Hotmail),  web  sites  visited,  keystrokes  typed,  files  downloaded,  programs  run  and  more. 

And  unlike  many  filtering  and  blocking  tools,  Spector  CNE  records  everything  they  do  in 
exact  visual  detail.  So,  you  have  absolute  proof  that  goes  way  beyond  just  knowing  they 
visited  porn.com. 

Take  control  of  employee  PC  and  Internet  abuse  with  Spector  CNE.  it’ll  be  the  best 
software  investment  you  make  this  year. 


I  shop  online 
after  closing 
my  office  door 


I  pass 

company  secrets 
via  the  web 


I  surf  porn  websites 
from  behind 
my  cubicle  walls 


■®fcpyright  2003  SpectorSoft  Corporation.  All  rights  reserved. 
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Rose  Electronics  ■  10707  Stancliff  Road  •  Houston,  Texas  77099 


CrystalView™  Pro 
DIGITAL  KVM  EXTENDER 
OVER  FIBER  OR  CAT  5 

♦  Extends  KVM  signals  up  to  33,000 
feet  away 

♦  Uses  only  two  fibers  or  single  Cat  5 

♦  Supports  DVIA/GA,  PC,  Sun,  USB. 
optional  Audio/Serial 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1 600x1 200  resolution 


CrystalView Rack 
CATS  KVM  EXTENDER 

♦  Extends  the  distance  from  6  or  1 2 
PC's  up  to  1 000  feet  away 

♦  optional  serial/audio 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1 600x1200  resolution 


CrystalView™ 

CATS  KVM  EXTENDER 

♦  Extends  your  KVM  station  up  to 
1000’  from  your  computer 

♦  Supports  PC,  Sun,  or  USB, 
optional  Audio/Serial 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1 600  x1 200  resolution 

♦  Available  as  standalone,  rack 
mounted,  or  high  density  chassis 


UltraLink™ 
REMOTE  KVM  ACCESS  OVER  IP 

Connect  to  remote  computer  over  Ethernet  or  dial-up 
Single,  dual,  quad  models 

Local  KVM  port  to  access  computers  at  Ultra  Link  unit 

Modem  port  with  dial-back  security 

Up  to  1 280x1 024  resolution,  supports  all  platforms 

Easy  to  install,  give  it  an  IP  address  and  run  the 
remote  client,  no  licensing  required 

Scaling  of  computer  image  reduces  amount  of  data 
sent  and  permits  fast  screen  updates  over  slow  links 

Quad  screen  mode  allows  you  to  see  four  servers 
from  one  screen 

SSL  security  and  passwords  prevents  unauthorized 
access 


ELECTRONICS 


CrystalView™  Mini 
CATS  KVM  EXTENDER 

♦  Extends  KVM  station  up  to  150 
feet  away 

♦  optional  serial/audio 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1280x1024  resolution 


WWW.ROSE.COM 


USA  toll  free 
ROSE  US 
ROSE  Europe 
ROSE  Asia 


800  333  9343 
281  933  7673 
+44  (0)  1264  850574 
+65  6324  2322 


dtSeaim 


dtSearm 


dtSearm 


dtSeardi 


dtSeaim 


dtSearm 
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.■lAg  —  —  ■■a-lm®  Instantly  Search 
Cl^jCgwdl  Gigabytes  of  Text 

♦  Search  across  networks,  intranets,  and  web  sites 

♦  Publish  large  document  collections  to  web  or  CD/DVD 

♦  over  two  dozen  indexed,  unindexed,  fielded  and  full-text  search  options 

«  highlights  hits  in  HTML  and  PDF  while  displaying  embedded  links, 
formatting  and|||"im<'f;](^ 

♦  converts  other  file  types— word  processor,  database,  spreadsheet,  email, 

ZIP,  XML,  Unicode,  etc.— to  HTML  for  display  with  highlighted  hits 

♦  developer  products  have  easy  wizard-based  setup;  optional  API 


“Searches  at  blazing  speeds”  -Computer  Reseller  News  Test  Center 

“Very  powerful ...  a  staggering  number  of  ways  to  search 
-Windows  Magazine 

“intuitive  and  austere  ...  a  superb  search  tool”  -PC  World 

dtSearch  “covers  all  data  sources ...  powerful 
Web-based  engines”  -bWeek 


‘Blindingly  fast”  -Computer  Forensics:  Incident  Response  Essentials 

‘A  powerful  text  mining  engine  ...  effective  because  of  the  level 
of  intelligence  it  displays”  -PCAI 

In  the  past  year  alone,  over  half  of  the  current  Fortune  10 
have  purchased  developer  or  network  Wcenses. 

1  -800-IT-FINDS  5eewww.dtsearch.com/br 

sales@dlsearch.com  *  developer  case  studies 

ou  CO....  oco.c  ...  ^  fully-tunclional  evaluations 
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X  n 


IndustriaMrength.. 
SUpeff-^^  Magazine 


Text  Retrieval 
Engine 

♦  for  Win  &  .NET 
♦  for  Linux 

♦  call  for  pricing 


X  r\ 


"Industrial-strength 


•♦S’ 


SUperb’*“P^  MagaziM 


r*< 


Web 

^$999  per 


Out 


jSjl 

^3‘|"lndustrial- 
I  superb*-!’ 


server 


Or* 


sl-strength... 
-PC  Magazine 


< 


Publish 


0  M 


0  f* 


$2,500 


X  n 


"Industrial-streogth 


<  ^ 


SUperb''-PC  Magazm# 


Spider 

♦  included 
with  Desktop, 
Network  and 
Web 


0  M 


HQi 


\0  d* 


X  n 


Industrial-strength 


superb'-pc  Magaztne 


M  iL 


Desktop 

♦  5799 


0  lA 


"‘^■"Industri 
^  I  superb* 


Industrial-strength 


-K  Magazine 


The  Smart  Choice  for 
Text  Retrieval®  since  1991 


S^rom  $800 
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ETHERNET  SWITCHES 


FIREWALL/VPN 


IP  ACCESS 


MODEMS  &  ROUTERS 


Function 


USB 

Wireless 
Stylish  &  Sleek 


/ 

o  i 

03 


.,.SU99es/. 


:3' 

%■ 


$49 


Break  away  from  convention  with  a  style  all  your  own.  The  ZyAIR  B-220  wireless  USB  adaptor  works  like  your 
standard  PCMCIA  wireless  card  -  but  can  go  anywhere  and  work  with  any  computer  with  a  USB  port. 

RESELLERS  -  Sign  up  with  us  to  sell  this  unique  product.  ZyXEL  -  Innovating  since  1989. 


UnImath  Natworking  Powar 


800-438-7728 


cs 


www.us.zyxel.com/stick 


WIRELESS)- 


C2003  ZyXEL  Communications.  ZyXEL  Is  a  tradmark  of  ZyXEL  Corporation.  All  spadfications  are  subject  to  change  without  notice.  fkiB 


Custom  Management  Levels 

OBSERVER 

•  Decode  over  500  protocols 

•  Long-term  network  trending  &  analysis 

•  Real-time  statistics 

EXPERT  OBSERVER 

•  What-lt  Modeling  Analysis 

•  Expert  Analysis 

•  Connection  Dynamics 

OBSERVER  SUITE 

•  Complete  SNMP  device  management 

•  Supports  full:  RMONl .  RM0N2.  HCRMON 

•  yyefr  Publishing!  Reports 


Remote  &  Hardware  Options 

REMOTE  NETWORKING  PROBES 

•  Fully  distributed 

•  Monitor  up  to  64  NICs  simultaneously 

•  New  levels  of  problem  solving  collaboration 

GIGABIT  &  WAN  HARDWARE  OPTIONS 

•  Portable  analyzer  systems 

•  Rack- mount  Probes  ready  to  go 

•  Direct,  passive  link  tor  independent  views 


i  US  &  Canada:  (952)  932-9899  •  Toll  free;  (800)  526-7919  •  Fax:(952)932-9545  •  UK  &  Europe: -f44  (0)  1959  569880 


INEIWORK* 


One  Network  Complete  Control 


OBSERVER' 


<2/ 


OBSERVER 


Wired  to  Wireless  •  LAN  to  WAN 


WE  MAKE  IT  happen: 

Test-drive  the  new  Observer  9.0  today  and  see  how  it  immediately 
finds  problems  you  didn’t  know  you  had,  optimizes  network  traffic 
and  provides  insight  for  future  planning.  Gall  800-526-791 9  for 
a  full  featured  fivaluation  or  visit  oUr  website  at 

wvwv.networkinstruments.com/nine 

,!  ,  -  - 

^troducing  Observer  9.0  v 

•  New  Applicabon  Analysis  ,  • '-.y 

•  Remote  probe's  noyy  provide  multi-interface  and  ,  ;L. 

multi-session  support  i  t  '7;/ 

•  Industry-firk  4GB  packet  capture  buffer ,  :  i 

•  Wireless  Site  Survey  Modes 

•  Nanosecond  resohjtipn 

•  Now  over  450  Expert  Eyents  :  '  ■ '  ’  - 

•  SNMP,  RMON  and  now  HGRMON  support  y ' ,  ^ 


www.networkinstruments.com/nir^e 


OUil 


©2003  Network  Instruments.  LLC.  Observer,  "Network  Instruments'  arid  the '  N  witn  3  dot"  logo 

are  registered  trademarks  of  Nelwo-dr  tnsr;.iiier'tf.,  LLC. 
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10:00AM,  THURSDAY,  DECEMBER  11th 

INSPECTION;  MON.,  DEC.,  1 0, 9AM-5PM  AND  MORNING  OF  SALE  AT  2865  URANIUM  DR.,SANTA  CLARA,  CA 
AUaiON  SALE  LOCATION:  WYNDHAM  HOTEL,  1300  CHESAPEAKE  TERRACE,  SUNNYVALE 


mulh-million  dollar  equipment  auctions 


SALE#2 


Auction  By  Order  of  Secured  Parties  in  the  Matter  of 

IT  Equipment  Teclinology 

TREMENDOUS  QUANTITY  OF  NETWORKING  EQUIPMENT  &  SERVERS 

from  Cisco,  Cabletron,  NorthernTelecom,  Lucent,  Sun,  Compaq,  Dell  &  Others 

•  STORAGE  ARRAYS  •  PC'S  •  NOTEBOOKS  •  PRINTERS  •  TAPE  DRIVES  &  MORE 

10:00AM,  TUESDAY,  DECEMBER  16™ 

IRVINE,  CA  (ORANGE  COUNTY  AREA)  FOR  LOCATIONS  VIEW  WEBSITE. 

www.CowmAkxandenmm 

Terms:  10%  Buyer's  Premium.  25%  due  upon  bid  award.  Cash/Cashier's  Check,  Business  Check  w/Bank  Letter  of  Guarantee. 
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western  telemetic  incorporated 


SSH  or  Out-Band  Access  to 
Consoles  at  Remote  Locations 


■  Secure  Shell  (SSHv2)  Encryption 

■  Simultaneous  SSH  or  Telnet 


[UU][^ 


(800)  854-7226  •  www.wti.com 


The  SCM-16  Secure  Console  Management  Switch  provides  in-band  and 
out-of-band  access  to  RS232  console  ports  and  maintenance  ports  on  UNIX 
servers,  routers  and  any  other  network  elements  which  have  a  serial  console 
or  craft  port.  System  administrators  can  access  serial  maintenance  ports 
over  the  network  via  SSH  connections  and  simple  menu-driven  commands, 
or  through  a  discrete  TCP  port  connection  mapped  directly  to  one  of  the 
SCM-16  serial  outputs. 


Visit  website  for  compiete  NetReach™  product  tine. 


Non-Connect  Port  Buffering 
SYSLOG  Reporting 
SNMP  Capability 
Any-to-Any  Port  Switching 
IP  Security  Features 
10/100  Base-T  Ethernet  Port 
Port-specific  Password  Protection 
Data  Rate  Conversion 
115/230VAC  or  -48VDC  Models 


Power  Control 


What’s  Your 
Current’  Load? 


Verify  Amps  Used  per  Circuit 
with  Sentry  Input  Current  Monitor 

•  Precisely  measure  the  current,  in  amps, 
for  each  power  circuit 

•  Prevent  overloads  on  existing  power  circuits 

•  Reduce  costs  for  additional  power  circuits 

•  Overcurrent  alarms 

•  Remote  Measurement  via  IP  or  RS-232 

•  Local  Measurement  via  digital  display 

Sentry  Power  Tower.  Equipment  Cabinet  Solutions. 


Server  Technology,  Inc. 


1040  Sandhill  Drive  Reno,  Nevada  89511  USA 
v/eb:  wvm.servertech.com  toll  free:  1.800.835.1515 


Production  Traoking  Over  Ethernet 


r 


] 


HoiiBDiai 

QQQBQQ  : 
DBDBSQ 
■DBHiaia 


Eliminate  your  slidpTlilor 
PCs  with  .1. 

Ethernet  Terminals  from 
ComputerWise  connected  to 
your  in-house  ^Af, 

Capture  production  data 
directly  into  fit^  on  yppr 
server. 


Features  C  Benefits 

•  interactive  Telnet  Client 

•  TCP/IP  over  lO/IOOBaseT  Ethernet^ 

•  Built-in  Barcode  Badge  Reader 

•  Optional  Mag-Stripe  &  RFID 

•  Auxiliary  RS-232  Serial  port 

•  Customizable  Data  Collection 
Program  Included 

•  Larger  keyboard  and 
display  sizes  available  y 


CX)MI>I  TUMBLE 
Gall  l-80e-25S  8788  or 
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70%  on  Neti^  Equipni^ 

i  RouterSf  Switches,  / 

SB  Servers  and  Modules  >  , 

..  A.4., 


/.>;•' V’«  *'i'‘'****'  ■  " 


ij^^^^arbished  Routers,  Switches,  / 

'  Access  Se&ers  and  Modules 


Wh^mTrust^^^We  1 1  :■. 

^^'^QUaiiiy 'Parts. Great  Price's 

:>W  -  ...  ;  '  ■» 

7  ^  .  '*'  •  •  g'i-fy  ».X  '  • 
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Thist  t/ie  Experts 

nlinental  WWW.  con  ticomp.  com 

COMPUTERS ./«. ,«4  Call  us:  (310)  416-1200 


Call  today  for 
10%  off  1  item  (Up  to  $500)^ 

*New  customers  ortly. 


Fully  Warranty 
°/<H90%olfUstPi 


We  Buy  New/Used 

CISCO 


714-878-2953 

Call  us  today  to  recover 
your  assets 

You  got  the  gear, 
we  got  the  cash! 


Attention  Resellers! 


SECUREIVIATICS 

The  Right  decision  for  Security  Products 

Best  Source  for  SOHKWAU: 
Security  Products! 

•  Inventory  on  hand 

•  Aggressive  prices 

•  Added  margins  with  training 

•  Pre  sales-Post  sales  support 

Securematlcs  Is  a  SonIcWALL  Authorized  Distributor 
And  Authorized  Trainlr)g  Partr)er. 


To  sign  up  for  the  Medalion  Partner  Program,  please  contact  us. 

Call  -  888-746-6700  sales(i>securematics.com  www.securematics.com 


toll  free  800  879  8795 
ph:  +  1  402  575  3000 
fax: +1  402  575  2011 


OptimumDataInc. 


vwvw.optimumdata.com 


ADTRAN  •  Sun  •  Extreme  Networks 


in_IMI 

See  the  entire  Generation 
3.0  collection  at: 

BRETTS 

Luggage.  Leather  goods.  Gifts 
Pens.  Clocks.  Lighters.  Games 

WWW.SU1TCASE.COM 


Protect  your  server  room  with 
a  Weather  Duck  Climate  Monitor 


9  Temperature 
4>  Humidity 
0  Air  Flow 
0  Light  level 
^  Doors  Open 
i*  Camera  Optional 
£  Sound  Level 


’.Wr 


^179 

Weather^ 
Duck"  i'' 
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CISCO  NORTEL 


43!^ 

Fax  Equipmant  Ust 
To  801-377-0078 

N(2RTEL 

NETWORKS 


Bay  Networks 
Ciitl  Sillies 


caaeTRon 


NEW* 


/  BUY  •  SELL 


Nortel  Baystack 
450-24T  Sarttch  Rag.  SMS 


Cisco  2501  Rag. 


Cisco 

WS-C1t24C-€N  Rag.  $350 

Nortel  BaysUck 
310-24T  SwitcD  Rag.  $2g6 


888-8LANWAN 

Cal  taf  fret  QiwttI  (888*852*6926)  www.Rle.com 


IPexpert,  Inc. 

(866)  225-8064 
I  www.ipexpert.net 
CCIE  (R&S,  SEC,  and  C&S),  CCSP, 
CCNP,  CCNA,  IP  TELEPHONY 


iTranscender 

(615)  726-8779  ' 

I  www.transcender.com 
Award-winning  practice  exams 
for  IT  certification 


Leamkey,  Inc.  . 

(800)  865-0165 
I  www.leamkey.com 
Self-paced  online  CD  network 
I  certification  developer  bus/apps 


I CBT  Nussets 

(888)  507-6283  &  (541)  284-5522 
I  www.cbtnuggets.com 
I  Affordable  training  videos  on  CD. 

MCSE,  MCDBA,  .MCSD,  CCNA,  Citrix,  Unux,  A+,  Net+ 
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IT  Careers:  Projected  Hiring  Surge  Drives  Online  Learning 


While  no  one  expects  a  replay  of  the  hiring 
craze  of  1999  and  2000,  most  business 
leaders  are  forecasting  an  increase  in  hiring  for 
technology  workers  in  2004.  The  surge  will  demand  a 
cross  between  sophisticated  technical  skills  and 
business  intelligence,  according  to  staffing  and 
professional  development  leaders. 

There  are  two  very  different  needs  in  terms 
of  ongoing  learning.  The  first  is  business  knowledge 
and  expertise,  which  most  universities  are  poised 
to  provide.  Suzanne  Gordon,  vice  president 
of  information  technology  at  SAS  Institute, 
says  that  in  research  and  development 
and  consulting,  employees 
need  advanced  degrees 
in  computer  science, 
statistics  or  operations 
research.  There  also  is  a 
need  for  the  cross  section 
of  business  know-how  with 
technology  -  such  as  combining 
an  information  technology  or 
computer  science  degree  with  in- 
depth  knowledge  of  economics, 
financial  services  or  the  healthcare 
industry.  Again,  schools  and 
universities  are  best  poised  to  provide 
the  advanced  study  that  a  technical 
professional  needs  to  lead  development  and 
implementation  of  projects  that  respond  to  a 
specific  business  problem. 


The  second  area  of  study  focuses  on  technology, 
but  with  the  add-on  of  understanding  people.  "I 
would  tell  them  to  take  courses  and  focus  attention 
on  hardcore  computer  science,"  says  John  Vlastelica, 
director  of  recruiting  programs  for  Amazon.com. 
"We  tell  engineers  to  learn  to  view  technology  not  as 
an  end  in  itself,  but  as  a  means  to 
an  end,  which  in  our  case  is 
delighting  customers." 


Gordon  agrees,  saying  that  her  IT  employees  tend 
to  be  life-long  learners.  "We  hire  people  who  love  to 
learn  technology.  They  do  that  through  our  in-house 
training,  but  also  by  learning  on  their  own.  These  new 
technologies  aren't  usually  available  through 
universities." 

That's  where  online  resources  become  important. 
Scores  of  companies  and  institutions  are  providing 
certification  for  a  wide  range  of  skills,  from  .Net  to 
Java  to  XML.  Hiring  and  management  leaders  also 
want  employees  to  gain  certifications  in  such  areas 
as  technology  management,  project  management 
and  security. 

"Education  is  just  one  piece,"  stresses  SAS's 
Gordon.  "Some  people  have  an  innate  ability  to 
manage  projects  and  people.  Others  need  to 
learn."  That's  why  she  includes  leadership  in  her 
list  of  learning  priorities  —  bringing  diverse 
people  together  to  discuss  a  common  situation 
or  business  problem,  understanding  the  situation 
from  a  variety  of  angles,  and  then  translating  this 
into  requirements  that  enable  users  and  highly 
technical  developers. 

For  more  information  about  IT  Careers  advertising, 

please  contact:  Nancy  Percival 

Vice  President,  Recruitment  Advertising 

800.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden 
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www.itcareers.com 


is  the  place  where  your 
fellow  readers  are  getting 
a  jump  on  even  more  of 
the  world's  best  jobs. 

Now  combined  with 
CareerJournal.com, 
you  have  more  jobs 
to  choose  from. 

www.itcareers.com 


Stanford  Technology  Partners 
Inc.  is  an  Information 
Technology  consulting  company 
with  its  clients  across  the  USA. 
We  seek  an  UNIX  Solaris 
System  Administrator.  Duties 
include  systems  administration 
for  global  e-business  retail 
exchange,  scalability  analysis 
and  capacity  planning,  expertise 
on  sun  clustering  with  a  strong 
focus  on  design  and  architec¬ 
ture,  assist  with  transition  to  co- 
location  environments,  establish 
and  maintain  close  working  rela¬ 
tionships  with  application  teams 
and  users  in  the  design,  devel¬ 
opment,  tuning,  and  problem 
resolution  of  sysfems,  communi¬ 
cate  effectively  in  meetings  and 
discussions,  maintain  software 
license  inventory  and  Perform 
emergency  problem  resolution. 
If  interested,  please  send 
resume  to:  Stanford  Technology 
Partners  lnc.289  Boston 
Turnpike  Suite  #6  Shrewsbury, 
MA  01545  e-mail: 
recruiter@stpincusa.com 


Seeking  qualified  applicants  tor 
the  following  positions  in 
Orlando,  FL:  Senior  Prog¬ 
rammer  Analyst.  Devise  or 
modify  procedures  or  perform 
systems/applications  testing  to 
solve  complex  problems  consid¬ 
ering  computer  equipment 
capacity,  limitations,  operating 
time  and  form  of  desired  results. 
Requirements:  Bachelor's 

degree"  in  computer  science, 
MIS,  engineering  or  related  field 
plus  5  years  of  expenence  in 
systems/applications  develop¬ 
ment  and/or  testing.  Exper¬ 
ience  with  Unix  and  SQL  also 
required.  "Master's  degree  in 
appropriate  field  will  offset  2 
years  of  general  experience. 
Submit  resumes  to  Sibi  George, 
FedEx  Corporate  Services, 
1900  Summit  Tower  Blvd.,  Suite 
1400,  Oriando,  FL  32810.  EOE 
M/F/DA/ 


Programmer  Analyst.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Duties:  Analyze, 
plan,  develop,  test  and  docu¬ 
ment  computer  programs  includ¬ 
ing  network  communication  pro¬ 
grams.  Evaluate  user  requests 
and  software  program  require¬ 
ments  for  new  and  modified  pro¬ 
grams.  Write  specifications, 
code,  test  and  debug  computer 
programs.  Customize  hardware 
and  software  to  client  needs. 
Use  of  Visual  Basic,  C++,  ASP, 
ActiveX,  HTML,  SQL  Server, 
VBScript  Developer  2000  and 
Windows  NT.  Reqs.  Bachelor  or 
equivalent  in  Computer  Science, 
Computer  Engineering.  Engi¬ 
neering  (any  field)  or  related 
field  of  study.  Plus  2  years  in  the 
job  offered  or  2  year  in  a  related 
occupation,  including  Senior 
Software  Engineer.  $75,000/ 
year,  40/hrs/wk,  8AM-5PM. 
Respond  by  resume  to 
EMPLOYMENT  PROGRAMS, 
PO  Box  46547,  Denver,  CO 
80202,  and  refer  to  Job  Order 
No.  CO5061381. 


SOFTWARE  ENGINEER 
(Alameda  County)  to  analyze, 
design  &  modify  computer  soft¬ 
ware  for  precision  laser  &  GPS 
manufacturer  selling  into  int'l 
civil  engrg  &  construction  indus¬ 
tries;  create  &  analyze  software 
for  use  in  connection  w/compa- 
ny's  survey,  machine  control  & 
laser  products,  utilizing  C++. 
Visual  C++.  &  CE  o/s  in 
Windows;  implement  user  inter¬ 
faces  in  Windows  desktop,  CE 
PDA's  &  Embedded  systems,  & 
design  user  Help  files  &  systems 
&  generate  user  &  product  man¬ 
uals,  utilizing  MS  Word.  Adobe 
PageMaker  or  FrameMaker;  35 
hrs/wk.  Must  have  Bach's  in 
Comp  Sci,  MIS  or  Electrical 
Engrg  &  1  yr  in  job.  Contact 
TPS,  Inc.,  Attn:  C.  Goad,  5758 
W.  Las  Positas  Blvd, 
Pleasanton,  CA  94588  &  quote 
#12904. 


OH  IT  Consulting  Firm  seeks 
Project  Manager  for  the 
mgment/design/development/im 
plementation/upgrade/mainte- 
nance  of  mgmnt  sysfems 
(CMMS):  consult  w/clients  to 
determine  client  needs;  assist 
w/contract  negotiations  and 
prep  of  client  capital  investment 
approval  proposals;  oversee 
implementation  of  new  system, 
upgrade  of  maintenance  to 
ensure  the  CMMS  system  is 
installed/running  correctly.  Min 
exp.  Bachelor's  in  Mech  Engin 
or  equiv.  and  3  years  in  job/job 
related  exp.  including  working 
knowledge  of  MS  Project,  MS 
Business  Professional  swre,  at 
least  1  Aerospace  ERP  sware 
maintenance  pkg  (ie.  Avexus 
Impresa  or  Visaer)  and  previous 
consulting  exp.  Travel  req. 
Resumes  to  Boyle  International 
Corporation,  7007  E.  Sprague 
Rd.,  Independence,  OH  44131. 
No  calls.  EOE. 


Senior  Business  Analyst/ 
Programmer  Assist  health  orga¬ 
nizations  develop  the  steps  to 
comply  with  the  HIPAA,  assess 
the  current  environment,  provide 
recommendations  for  achieving 
HIP/LA  compliance  within  the 
required  time  frames,  and  pro¬ 
vide  remediation  assistance  and 
training.  Provide  leadership  and 
direction  to  project  teams  and 
client  staff  regarding  HIPAA 
Privacy  and  Security,  -  2  yr 
experience  in  using  exchange, 
eGate,  elnsight  for  implementing 
EDI  transaction/Experience  in 
using  system  development  life 
cycle  methodology  approach/ 
Experience  with  mainframe  plat¬ 
form  (COBOL,  CICS,  ADABAS, 
NATURAL  VSAM,  DB2  and 
JCL).  Base  Salary  $65000. 
Send  application  and  resume 
to:  LB  Infosys.  1300  Edgewater 
Dr  #306.Pierre.  SD  57501. 


Analyst/Project  Programmer, 
Biomedical  Information 

Develops  appropriate  computer 
algorithms  for  data  mining  of 
advanced  biological  and  chemi¬ 
cal  research  data  for  the  purpos¬ 
es  of  developing  Bioinformatics 
and  statistical  data  output,  which 
will  be  used  for  various  human 
genetic  research  projects. 
Reads  and  interprets  research 
publications  using  basic  princi¬ 
ples  in  genetics,  molecular  biol¬ 
ogy  and  computational  biology. 
Uses  SAS,  S-Plus  or  SYSTAT  in 
conjunction  with  Bio-PERL, 
BLAST,  UNIX,  C++,  and  Fortran 
in  performance  of  duties. 
Requires  Master's  degree  or 
completion  of  coursework  for 
Master's  degree  in  Computer 
Science,  Computing,  or  Biology. 
Education  to  include  completion 
of  nine  credit  hours  in 
Bioinformatics.  Send  resume, 
no  calls  to:  Medical  College  of 
Wisconsin.  Attn:  Employment 
Office  -  JMC1208.  8701 

Watertown  Plank  Rd., 
Milwaukee.  Wl  53226,  Fax:  414- 
456-6502. 


Systems  Analyst:  Analyzes 

user  requirements,  procedures, 
and  problems  to  automate  pro¬ 
cessing  or  to  improve  existing 
computer  systems.  Must  be 
able  to  travel.  Bachelor's 
degree  in  computer  science, 
engineering,  or  math-related 
and  2  yrs.  experience  required 
in  job  offered.  Included  In.  and 
not  in  addition  to.  the  2  yrs 
requirement,  2  yrs  expenence  in 
JAVA  (JDBC,  BEANS.  RMI), 
COBRA,  JAVA  Script,  HTMS, 
ASP  CGI  with  Perland  Oracle. 
40  hrs  per  week,  Mon-Fri,  9:00 
am  -  5:00  pm;  no  overtime 

/kpply  by  resume  only  to  Humar 
Resources  Coordinator,  Capri¬ 
corn  Systems.  Inc.  3569 
Habersham  at  Northlake,  Bui- 
ding  K.  Tucker,  GA  30084. 
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R  Systems,  inc.  is  a  global  infof- 
matiofi  technology  services 
company  ar>d  it  has  multiple  Job 
openings  for  the  following  posi¬ 
tions  at  its  corporate  office  in 
Sacramento  as  well  as  Project 
sites  throughout  the 
United  States: 

•  Applications  Programmer 

•  Database  Analyst 

•  Software  Engineers 

•  Systems  Analyst 
■  Network  Analyst 

•  IT  Project  Managers 

•  Business  Analyst 

•  Sales  Engineer 

•  Programmer  Analyst 

•  Sales  Manager 

•  Database  Administrators 

•  Market  Research  Analyst 

Minimum  requirement:  Bach¬ 
elor's  degree  or  equivalent  and 
one  year  experience  in  the  job 
offered.  Ail  positions  may  involve 
relocation  to  project  sites. 

Submit  detailed  resume  and 
position  applied  for  to: 

Attn:  Venkatesh  Sundararajan 
5000  Windplay  Drive  Suite  5 
El  Dorado  Hills,  CA  95762 


SR,  PROGRAMMER  ANALYST 
to  design,  develop,  test  and 
implement  sftvr.  products  & 
apps.  Develop  integration  Web 
services  &  Intranet  projects,  e- 
business  Reports,  database 
design  &  GUI  screens  using 
ASP.NET,  VB.NET,  C#,  SOAP, 
WSDL,  DHTML,  HTML,  VB, 
ASP,  Visual  Source  Safe,  Visual 
Interdev,  Visual  Studio. Net, 
XML,  Oracle,  Crystal  Reports, 
Actuate  Reports,  IIS  &  SQL 
Server.  Perform  unit  &  basic 
acceptance  tests.  Bachelor's 
degree/equivalent  in  any  Engg. 
disc./computer  science/reiated 
field  &  5  years  of  experience  as 
IT  professional  required.  Must 
have  at  least  1  year  of  course- 
work  in  computer  science  if 
degree  not  in  comp,  related  field 
&  at  least  1  yr  exp.  in  all  above 
technologies,  skills  &  tools.  Will 
accept  Master's  w/2  yrs  exp.  in 
lieu  of  Bachelor's  w/5  yrs  exp. 
Apply  lo:Palayekar  Co  Inc  1959 
E  Third  Street,  Williamsport  PA 
17701 


MSYS,  Inc.  is  an  information 
technology  consultancy  built  to 
deliver  high-value  business 
solutions  for  our  clients.  We  are 
looking  for  the  following  position. 
Systems  Analysts:  Design,  ana¬ 
lyze  and  develop  computer  and 
business  applications  of  existing 
and  proposed  systems.  Know¬ 
ledge  in  VB,  ASP,  JavaScript, 
SQLServer2000.  NET  Tech¬ 
nology.  Web  Design  and 
Development,  E-Commerce 
Services,  XML.  COM,  Crystal 
reports,  with  back  end  databas¬ 
es  like  SQL  Server  and  Oracle. 
Design  client-server  distributed 
Internet  based  projects,  includ¬ 
ing  e-Commerce  appiications. 
Need  Bachelor's  degree  In 
Computer  Science.  Engineering, 
or  related,  and  2  years  of  expe¬ 
rience  Send  resume  to:  Human 
Resources,  MSYS,  Inc.,  104 
Iowa  Ln.,  Suite  201,  Cary,  NC 
27511.  E-mail. 
info@msysinc.com 


Application  Specialist/Unix  Adm¬ 
inistrator  wanted  by  shipping 
and  container  co.  in  Tampa,  FL. 
Must  have  a  BachetoTs  degree 
in  Comp.  Set.,  Eng.  or  related 
field,  plus  3  yrs.  exp.  with 
Microsoft  technologies:  2  yrs. 
exp.  in  the  Shipping  Industry:  2 
yrs  .  exp.  in  implementabon  of 
Web  based  (WWW)  application 
architecture  and  1  yr  exp.  with 
Unix  base  middleware  applica¬ 
tion  such  as  LDAP  and 
Application  Servers.  In  lieu  of  a 
Bachelor's  degree,  we  will 
accept  an  additional  2  yrs.  of  rel¬ 
evant  exp  Refer  to  Job#JL2003. 
Lykes  Lines  Limited,  LLC  (CP 
^ips),  401  East  Jackson  St  . 
Suite  3300,  Tampa.  Flonda 
33602 


Software  Co.  SI.  NY  Seeks 
Project  Leader,  Sr  &  Jr 
Programmers  w/following  skills 
tor  their  medical  div:  VB  x/.net, 

embedded  VB  3.0,  SQL  Server 

7/00,  Oracle  x.  PL/SQL,ASP, 
Java,  C++,  IIS,  Unix/Windows  x 
&  CE:  Reqd  Healthcare  ind. 
knowledge,  BS  in  CS/Engg/Bus. 
Adm  w/5  yrs  exp.  for  sr  level  &  3 
yrs  exp  for  jr.  prgmrs  in  job  offd. 
Send  resumes  to  HR,  Infinite 
Software  Solutions,  Inc.,  303 
Bradley  Avenue.  SI,  NY  10314. 

Computers-Seeking  qualified 
candidates  for  senior  and  mid¬ 
level  IT  professional  positions 
including:  Programmer  Analysts. 
Database  Administrators, 

Software  Engineers,  IT/Software 
Consultants.  Systems  Analysts. 
Qualified  candidates  must  pos¬ 
sess  MS/BS  or  equiv.  and/or  rel. 
work  exp.  Some  positions 
require  1  yr.  or  more  SAP  exp. 
Duties  include:  Work  with  3  of 
the  following:  SAP,  ABAP,  XML, 
Siebel,  Oracle,  C++.  Fwd. 
resume  &  references  to: 
Halcyon  Solution,  Inc.,  Attn:  HR, 
950  Taylor  Station  Rd.,  #D, 
Columbus,  OH  43230. 

Network  Administrators  needed. 

Seeking  qual.  candidates  pos¬ 
sessing  BS  or  equiv.  and/or  rel. 

work  exp.  Cisco  Cert.  Design 

Assoc.  &  Cert.  Novell  Engg. 

certs,  req'd,  or  in  the  alt.,  exp. 

must  include  1  yr.  working 

w/Cisco  &  Novell  NetWare.  Fwd. 

resume  &  ret.  to:  Attn:  IT 

Manager,  Associated  Students, 

SJSU,  1  Washington  Sq.,  AS 

House,  San  Jose  State  Univ., 

San  Jose,  CA  95192-0128 

Programmer  Analyst  (2  posi¬ 
tions)  -  Design  and  development 
of  Electronic  Data  Capture 
Systems  utilizing  Formware, 
Infolmage  and  IFPS.  Requires 
Bachelor  in  Computer  Science. 
Engineering  or  Mathematics. 
Requires  2  yrs  exp  in  job  offered 
or  2  yrs  exp  as  Software 
Engineer,  Systems  Analyst  or 
Systems  Engineer.  Must  have  1 
yr  exp  in  document  imaging 
using  Infolmage  and  6  months 
exp  in  Formware  and  IFPS. 
Various  iocations  throughout  the 
US.  5  day,  40  hr/wk,  $75,150/yr. 
Please  mail  resumes  to 
Workforce  Development 

Programs,  PO  Box  46547, 
Denver,  CO  80202  and  refer  to 
order  number  CO5062126. 

Computer  Professionals  (pro¬ 
grammer,  system  analyst,  soft¬ 
ware  or  project  engineers)  want¬ 
ed  by  Bralak  Technologies. 
Candidates  must  have  at  least 
BS/MS  degree.  IT  experience  in 
C/C++,  Oracle,  SQL,  VB  Java. 
Web  Technology  is  a  plus. 
Please  send  resumes  to 
recruiter@bralak.  EOE 

Infogen  is  seeking  IT  profession¬ 
als.  Req.  BS.  Skills  in  following 
area  are  pius:  Oracle9i, 
Weblogic  /  WebSphere,  C++, 
Visual  C++.  VB,  COM,  STL, 
MTS.  MSMQ,  ASP.  Java.  HTML, 
XML,  MTS,  MSMQ,  ADO.  UML. 
Travel  is  required.  Send  resume 
to  infojobs@infogeninc.com. 
EOE. 

CDI,  one  of  the  largest  staffing 
companies,  has  multiple 

IT/Engineer  positions.  We 
require  BS/MS  or  equivalent 
with  exp.  in  the  related  fields. 
Good  reference  also  required. 
We  offer  competitive  salary  with 
full  benefit  package.  Please  visit 
www.cdicorp.com  to  find  posi¬ 
tions. 

System/Programmer  Analysts, 
Software/Project  Engineers  or 
other  IT  professionals  wanted  by 
Imetris,  an  e-business  solutions 
provider.  MS/BS  required.  Skills 
in  Oracle,  SQL,  Java,  SAP, 
PeopleSoft,  ERP  tools  pre¬ 
ferred.  Competitive  wages. 
Please  contact 
info@imetris.com.  EOE. 

Internet  company  seeks 

PhD  Research  Engineers 

responsible  for  innovative 

research.  Interested  appli¬ 
cants  should  send  resumes 

to:  K  Wolfe;  1501  Salado; 

Mt.  View.  CA  94043.  Visit 

www.google.com  for  addi¬ 
tional  information. 

Computers 

Integrated  Dealer  Systems  (St. 
Petersburg,  FL)  is  seeking  a 
DBA/Technical  Trainer  to 
design/maintain  the  company's 
SQL  Server  and  train  commer¬ 
cial  customers  on  an  EDI  pack¬ 
age.  Must  have  experience  with 
RDBMS.  MSAccess/SQL/  Uni- 
Verse,  DataStage  and  providing 
technical  training.  B.S.  in 
CS/MIS  or  equiv.  +  1  yr.  experi¬ 
ence  as  DB/VTechnical  Trainer. 
/Vpply  online  at  www.bnjnsvKick.com. 
Careers  (search  City  "St. 
Petersburg").  Any  questions  to 
HR@IDS-Astra.com.  Only  can¬ 
didates  under  consideration  will 
be  contacted.  No  calls.  EOE 

Looking  for  a  new  career? 


The  new  itcareers.com 
and  CareersJournal.com 
combined  jobs  database 
can  help  you  find  one. 

Check  us  out  at: 
www.itcareers.com 
or  call:  (800)  762-2977 


Software  Engineer  (2  positions) 
-  Research,  design  and  develop 
computer  software  systems  in 
conjunction  with  hardware  prod¬ 
uct  development  applying  princi¬ 
ples  and  techniques  of  computer 
science,  engineering  and  math¬ 
ematical  analysis.  Requires  a 
Master  in  Computer  Science. 
Info  Systems,  Engineering  or 
Mathematics.  Requires  1  -yr  exp 
in  job  offered  or  1-yr  exp  as 
Programmer  Analyst,  Systems 
Analyst  or  Systems  Engineer. 
Must  have  1  -yr  exp  using  Active 
Server  Pages  and  JavaScript. 
Various  unanticipated  iocations 
throughout  the  US.  5  day,  40 
hr/wk,  $71,393/yr.  Please  mail 
resumes  to  Workforce  Develop¬ 
ment  Programs,  PO  Box  46547, 
Denver,  CO  80202  and  refer  to 
order  number  C05062104. 


You  can 
find  a 
better 

JOB 

with  one 
hand  tied 
behind 
your  back. 


Just  point  your 

mouse  to  the 

world’s  best 

IT  careers  site, 

powered  by 

CareerJoumal.com 

Find  out 
more  at: 
itcareers.com 
or  call  (800) 
762-2977 


IT  Careers 
Wants  You! 

Take  the  hassle  out  of 

job  searching  and 

check  us  out  at 

www.itcareers.com. 

Today,  more  than  ever, 
the  right  skills  fuel  the 
new  economy  and  IT 
Careers  wants  you  to  be 

there.  Check  us  out  at: 

www.itcareers.com 
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COMPLIMENTARY 
EVENT  FOR 

PROFESSIONALS  ONLY 


MODERATOR 
johna  Till  Johnson 


INSIGHT,  EXPERTISE, 
AND  TECHNOLOGY 


benefits  gained  from  converged 
voice/data  networks 
advantages  of  voice  services  over 
wireless  networks 
techniques  for  creating  virtual 
private  networks 

strategies  for  integrating  new  voice 
technologies  with  legacy  nets 


WHO  WILL  BE  THERE? 


►  johna  Till  Johnson,  President  of 
Nemertes  Research 

►  Sandra  Gittlen,  Events  Editor  for 
Network  World 


And  leading  executives  involved  in 
enterprise  voice  technologies 


►  network  managers 

►  telecommunications  managers 

►  call  center  managers 

►  senior  IT  executives 
(VP  and  CxO  level) 


This  event  is  limited  to  Network  and  IT 
professionals  involved  in  the  evaluation, 
purchase  and  implementation  of  VoIP  and 
IP  telephor^  Network  World  Events  reserves 
the  right  to  determine  total  audience  and 
profile  of  complimentary  attendees.  Paid 
registration  is  also  available. 


Ill 


■TECHNOLOGY  TOUR 


Voice 


'^T-january  27,  2004  7^^ 


RICHARDSON,  TX 


over 


IP 


February  5,  2004 


FRAMINGHAM,.  MA  .M' 


IP  Telephony  From  Dollar  One 
to  Dollars  Won 


t's  magical.  The  moment  data,  voice  and  video  fully  integrate  across  your  network  and  suddenly  the 
benefits  become  real.  Employees  more  connected.  Information  more  accessible.  Customers  more  satisfied. 
Your  company  more  productive.  And  you  more  valuable.  Transforming  VoIP  and  IP  telephony  from  a 
long-term  investment  and  into  an  immediate  and  productive  asset. 


It  begins  at  the  first  Network  World  Technology  Tour  event  of  2004  —  VoIP:  IP  telephony  from  dollar  one 
to  dollars  won.  An  information-rich  opportunity  for  anyone  involved  in  the  deployment  and  management  of 
enterprise  voice  technologies.  The  industry's  only  one-day  seminar  on  IP  telephony  that  provides  both  strategic 
vision  and  practical  applications. 


Register  now  and  you'll  immediately  see  the  benefits  enterprisewide.  In  the  smile  of  a  new  customer.  The  increase 
in  your  sales.  In  the  countless  ways  you  can  turn  the  promise  of  VoIP  and  IP  telephony  into  pure,  practical  power. 


Advance  Reservation  by  qualified  professionals  is  Required  for  Complimentary  Attendance 

Register  now  at  WWW.  nwfusion.com/VPW4A2 

or  call  1  -800-643-4668 


PLATINUM  PRESENTING  SPONSORS: 


COLD  EXHIBITING  SPONSORS: 


3C0fn 


0/  Agilent  Technologies 


i^teoncorD 


iSS 


Compt«i«y.  &o*M0 


Sprint 


To  join  sponsors  of  this  premier  Network  World  Event,  please  contact  Andrea  D' Amato  at  1  -508 -490- 6520  or  adamato@nww.com  for  free,  no-obligation  information. 
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I  SEMINARS  EVENTS 


Network  World  Seminars 
and  E vents  are  one  and  two- 
day.  intensive  seminars  u- 
cities  nationwide  covering 
the  latest  networking  technologies.  AH  of  our  seminar .  are 
also  available  for  customized  on  site  framing.  For  complete 
and  immediate  mformaton  on  our  current  seminar  offerings 
call  a  seminar  representative  at  800-643  4668.  or  go  is 
www.nwfusion.com/seminars. 
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Publicize  your  press  coveraw  m  Network 
World  by  ordering  reprmls  of  yOur  editorial 
mentions.  Reprints  make  great  marketing 
materials  and  are  available  m  quantities  of 
500  arxl  up.  To  order,  contact  Reprint 
Mariagement  Services  at  (717)  306-1900  «t29 
or  E  rnail:  mshober^reprinlbuyer  com 
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Information  warfare 

continued  from  page  12 

typically  to  share  some  character  traits. 

Ff)st  said  clc^se  analysis  of  work  histories 
of  n  administrators  who  sabotaged  their 
employers’  networks  or  did  other  damage 


reveals  that  they  often  first  commit  less^eri- 
ous  infractions,  such  as  refusing  to  train 
their  backup.  Intervention  by  management 
early  on  could  help  prevent  problems  from 
escalating,  because  introverted  people  usu¬ 
ally  don’t  seek  help. 

The  FBI  has  started  its  own  study  of  those 


who  commit  computer  crimes  —  not  nec¬ 
essarily  focusing  on  IT  administrators  —  by 
interviewing  those  now  in  jail,  said  John 
Jarvis,  an  FBI  behavioral  research  scientist. 
“Cybercrime  is  primarily  an  insider  phe¬ 
nomenon,”  Jarvis  said.  Only  a  quarter  can 
be  classified  as  “outsider,”  he  said. 


Guarding  against  that  minority  is  the  job 
of  insiders  such  as  Timothy  Vieregge, 
deputy  of  the  systems  and  architecture 
branch  in  computer  network  operations  at 
Fort  Belvoir’s  Rrst  Information  Operations 
Command  in  Virginia.  Vieregge  helped  set 
up  a  network-monitoring  system  for  the 
Army  before  the  start  of  the  war  in  Iraq. 

The  system,  based  on  more  than  500 
intrusion-detection  monitors  at  Army  net¬ 
work  facilities  around  the  globe,  captured 
information  on  cyberattacks  and  sent  it  to 
the  security  information  management 
product  the  Army  uses,  Symantec’s 
CyberWolf,  with  NSA-developed  visualiza¬ 
tion  software  called  Renoir. 

While  Vieregge  said  he  couldn’t  say 
where  attacks  against  Army  computers 
originated,  the  monitoring  systems 
showed  which  attacks  succeeded  and 
which  failed. 

While  attempted  attacks  increased  84% 
between  October  2002  through  March, 
the  number  of  successful  intrusions 
against  Army  facilities  has  dropped  from 
a  high  of  16  in  October  to  six  in  March. 
Vieregge  said  the  monitoring  system 
helped  the  Army  prioritize  areas  that 
needed  strengthening  —  where  proper 
software  patching  hadn’t  been  done,  for 
example  —  and  setting  up  routers  to 
block  IP  addresses  from  attack  points. 

Vieregge  said  the  Army  isn’t  using  intru¬ 
sion-prevention  systems  yet  to  automati¬ 
cally  block  attacks  but  is  following  the 
technology’s  development.  ■ 
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It’s  everyone’s  business 


Today,  information  security  is  a  shared  responsibility,  top-of-the-agenda 
in  the  board  room  as  well  as  the  server  room.  Smart  business  executives 
understand  security  is  more  than  technology — it’s  business  policy, 
process,  procedure  and  ultimately,  business  advantage.  Smart  IT  pros 
understand  that  the  right  security  starts  with  making  the  right  business  case 
for  it.That’s  why  Infosecurity  2003  will  be  held  in  New  York— the  business 
capital  of  North  America.  For  information  asset  stakeholders,  the 
Infosecurity  Conference  &  Exhibition  is  the  ideal  forum  to  share  real-world 
concerns  and  discover  the  most  promising  new  security  solutions. 
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Register  for  Free  Exhibit  Hall  admission  at 
‘H  inf  osecurity  event  com 

To  register  online  and  for  event  updates,  visit  our  website. 

Or  call  888.251.0566  or  203.840.5690.  For  information  about  exhibiting, 
please  contact  Mike  Alessie  at  1.203.840.5387. 
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OR  CALL  (866)  COMNETX. 

Please  use  priority  code  MGER. 


The  networking  landscape  is  changing  on  every  level.  As  the 
first  event  of  the  year  to  examine  the  most  critical  issues  facing 
the  networking  industry,  COMNET  2004  will  demonstrate  how 
wireless,  security,  VoIP,  WAN  and  the  data  center  are  redefining 
how  business  is  done. 

COMNET  2004  will  enable  you  to  make  informed  technology 
evaluations  and  purchasing  decisions  for  the  year  ahead. 

Come  to  COMNET  2004  and  become  a  technology  champion! 

You  cannot  afford  to  miss  COMNET  2004  if  you  need  to: 

•  Secure  your  most  important  and  valuable  resources 

•  Connect  and  manage  remote  office  resources 
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•  Understand  the  advantage  of  being  first 
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arlier  this  year  I  wrote  about 
scumware.the  generic  term  for 
various  kinds  of  software  that 
hides  on  your  PC  and  displays  ads 
and/or  reports  on  your  online  behav¬ 
ior.  Well,  it  looks  as  if  the  problem  is 
going  to  get  worse  in  the  near  future 
because  a  lot  more  marketing  com¬ 
panies  are  starting  to  turn  to  this  tool. 

For  example,  in  September  Webmasters  started 
noticing  server  log  entries  for  browser  requests  in 
which  user  agent  strings  —  the  text  strings  that  de¬ 
scribe  the  browser  and  its  platform  —  also  included 
the  text“FunWebProducts.”These  were  all  from  Inter¬ 
net  Explorer  Web  browsers,  and  the  strings  looked 
like  this:“Mozilla/4.0  (compatible;  MSIE  5.01;  Win¬ 
dows  NT  5.0;  FunWebProducts).” 

The  root  of  the  problem  was  a  piece  of  software 
called,  not  surprisingly  FunWebProducts  distributed 
by  Fun  Web  Products. 

This  company’s  Web  site  is  actually  a  collection  of 
links  to  separate  product  Web  sites  published  by  Fun 
Web  Products,  such  aswww.smileycentral.com, 
which  offers  a  tool  for  embedding  smileys  in  e-mail 
messages,  and  www.popswatter.com,  which  blocks 
pop-up  ads. 

Sounds  like  good  clean  fun  but  hold  on. 
According  to  the  FunWebProducts  End  User 
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Licensing  agreement  (see  details  at  www.nwfu 
sion.com,  DocFinder:  8833):“A11  of  our  applications 
come  with  the  MyWebsearch  browser  plugin  —  a 
customizable  browser  toolbar  which  provides  end 
users  with  easy  access  to  search  results  from  the 
best  search  engines  on  the  Internet  in  just  one 
click  and  enhances  your  browser  experience  by 
providing  relevant  links  and  results  in  response  to 
misspelled  or  incorrectly  formatted  browser 
requests.” 

So  while  the  FAQs  for  most  of  these  products  claim 
“includes  no  spyware  and  no  adware,”  what  the 
included  MyWebsearch  code  actually  does  is  “help” 
you  with  “suggestions”  when  you  get  “lost.”  Right. 

But  that’s  not  all.  According  to  BestPatrol  (go  to 
DocFinder:  8834  to  learn  more)  FunWebProducts 
makes  it  difficult  to  uninstall  the  software  and 
hijacks  your  browser  by  setting  your  home  page  to 
point  to  sites  of  the  company’s  choice.  Worse  still, 
FunWebProducts  attempts  to  reset  the  browser 
home  page  should  you  dare  to  try  to  change  it.  And 
even  worse,  FunWebProducts  slows  your  browser 
and  could,  according  to  some  people  online,  make 
your  browser  unstable. 

FunWebProducts  is  notable  because  it  has 
acquired  a  large  user  population  with  remarkable 
speed. The  owner,  IWon,  is  not  new  to  this  game  —  it 
is  responsible  for  a  series  of  notorious  adware  prod¬ 


ucts,  including  IWon.iWon  Co-Pilot,  iWon  Search 
Assistant  and  MySearch/MyWeb. 

Wliy  have  users  installed  so  many  copies  of 
FunWebProducts?  Probably  by  dint  of  widespread 
advertising.  And  when  you  hit  the  Web  site,  all  of  the 
links  to  the  product  sites  immediately  try  not  once 
but  twice  to  get  you  to  install  the  software! 

You  have  to  admit  there’s  a  slickness  to  the  whole 
idea;  Offer  users  gadgets  that  will  amuse  them  and 
then  modify  the  way  their  systems  operate  for  com¬ 
mercial  advantage. 

Now  I’m  not  against  such  objectives  as  long  as  — 
and  this  is  the  crucial  issue  —  there’s  nothing 
sneaky  going  on.  We  all  can  agree  that  as  soon  as 
companies  do  anything  duplicitous  like  this  —  such 
as  trying  to  get  users  to  install  the  software  with  little 
or  no  explanation  about  what  the  software  actually 
does  —  they  are  behaving  unethically. 

And  when  sneaky  stuff  is  going  on  there  will  be 
consequences,  as  this  kind  of  software  can  not  only 
cause  browsers  to  perform  slowly  it  also  can 
degrade  overall  system  performance,  cause  other 
applications  to  misbehave  and  damage  Windows 
configurations. 

So  what  are  we  going  to  do  about  scumware?  Tune 
in  next  week  . . . 

Tales  of  the  indefensible  to  backspin@gibbs.com. 
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News,  insights,  opinions  and  oddities 


By  Paul  McNamara 

Had  enough  of  Plaxo,  et  al 

There  are  so  many  annoying  things 
about  Plaxo  —  and  other  address-book 
update  services  like  it  —  that  one  scarcely  knows  where  to  begin.  So  let's  just 
dive  in: 

“This  is  the  second  Plaxo  message  you've  received,"  reads  the  boilerplate 
come-on  included  with  each  request  for  updated  contact  info.  “Get  Plaxo  to 
automatically  handle  these  messages."The  last  few  words  are  a  link  you  can 
follow  to  sign  up  for  the  free  service.  If  you're  a  user  —  part  of  the  Plaxo  club 
—  these  information  exchanges  occur  under  the  covers  and  spare  you  the 
extra  in-box  clutter  that  nonmembers  endure. 

In  other  words,  that  come-on  isn't  Just  an  offer;  it's  also  borderline  black- 
mail.They're  essentially  saying  you  can  either  sign  up  for  Plaxo  or  resign 
yourself  to  receiving  these  unwelcome  interruptions  from  everyone  who  a) 
uses  Plaxo:  b)  has  somehow  acquired  your  address;  and  c)  lacks  any  sense  of 
e-mail  etiquette. 

Yes,  Plaxo  offers  nonusers  opt-out  options,  including  one  that  purportedly 
will  protect  reluctant  participants  from  any  and  all  Plaxograms.  But  as  has 
been  noted  here  before,  opting  out  of  such  propositions  is  time-consuming  and 
carries  the  risk  inherent  in  dealing  with  an  unknown  quantity. 

Another  distasteful  element  is  that  so  many  of  the  requests  for  updated 
information  come  not  from  friends  and  business  associates,  but  strangers  who 
through  some  Kevin  Baconish  Six  Degrees  of  E-mail  Separation  have  managed 
to  collect  your  address. 

The  one  referenced  above  was  from  a  Gartner  analyst  with  whom,  near  as  I 
can  recall,  I  have  never  spoken  or  exchanged  e-mail.  Yet  the  subject  line  of  his 
Plaxogram  read:  “Keeping  in  touch."  . . .  How  touching. 

So  I  sent  the  fellow  an  e-mail  asking  a  few  questions  about  his  experiences 


with  Plaxo  and  thoughts  on  the  etiquette  issues.  He  didn't  reply  to  my  request . . . 
and  I  won't  belabor  the  irony. 

These  services  are  selfish. The  users  get  to  keep  their  contact  info  perpetu¬ 
ally  up  to  date  —  no  fuss,  no  muss  —  and  all  it  takes  is  a  willingness  to  impose 
on  everyone  they  know,  lots  of  people  they  barely  know  and  some  they  couldn't 
pick  out  of  a  police  lineup  for  reward  money. 

If  Plaxo  users  want  to  exchange  contact  info  —  or  every  intimate  detail  about 
their  lives  —  with  each  other,  well,  more  power  to  them.  But  pinging  everybody 
in  your  address  book  is  just  a  bit  too  promiscuous  for  my  taste. 

Of  course,  the  real  bottom  line  with  these  services  is  not  making  the  world  a 
more  efficient  place  through  accurate  address  books;  it's  making  money. 

“Plaxo  plans  to  make  money  by  releasing  business  editions  that  include  extra 
features  (such  as  collaboration),"  says  Rikk  Carey,  the  company's  vice  presi¬ 
dent  of  engineering,  responding  to  a  string  of  unflattering  comments  on  a 
Network  World  Fusion  forum  (www.nwfusion.com,  DocFinder:  8832).  "The  free 
version  will  remain  free,  but  we  will  be  adding  more  and  better  new  features  to 
the  premium  versions." 

I  sent  Carey  an  e-mail,  too.  He  replied  promptly  and  promised  he'd  get  back  with 
answers  to  my  questions  after  dispensing  with  a  more-pressing  matter. ...  He 
didn’t. . . .  More  irony. 

Security  and  privacy  concerns  cling  to  these  services  like  a  2-year-old  child 
to  a  parent’s  pant  leg,  and  Plaxo  goes  to  great  lengths  to  allay  those  fears  on 
its  Web  site  (www.plaxo.com). 

Nevertheless,  something  tells  me  these  services  are  going  to  have  their  work 
cut  out  for  them  selling  the  concept  to  network  professionals.  I  asked  one  of 
our  IT  guys  what  he  thinks  of  Plaxo.  His  reply:  “You  mean  the  one  that  updates 
your  contact  list?The  guy  who  invented  that  stupid  thing  ought  to  be  shot." 

Just  a  figure  of  speech,  of  course,  but  you  get  the  idea. 

Oh.  and  my  address  hasn  't  changed  in  five  years:  buzz@nww.com. 


With  HP  ProCurve  Networking  solutions,  you  can  get  the  gigabit  technology  you  need  without  having  to 

sacrifice  your  entire  budget  to  get  it.  The  HP  ProCurve  Switch  2800  series  is  engineered  to  deliver  high-performance  gigabit 
technology  at  a  compelling  cost.  Our  switches  include  HP  support,  software  updates  and  our  industry-leading  lifetime  warranty.  With  intelligence 
pushed  to  the  edge  of  the  network,  you  get  the  control  you  need.  All  of  which  translates  into  a  better  return  on  your  IT  investment. 


HP  PROCURVE  SWITCH  2848 

$4,899 

44  10/100/1000  ports 

4  dual  personality  ports  for  10/100/1000 
or  mini-GBIC  connectivity 

802.1  X,  SSH,  SSL  and  port  security 

Lifetime  warranty  with  next-business-day 
advance  replacement** 
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To  learn  more  about  how  your  business  can  benefit  from  HP  ProCurve  Networking's;^ 
gigabit  technology  at  an  affordable  cost,  go  to  wwwhp.com/go/hpprocurve.  ■/ 


'List  price.  **For  as  long  as  you  own  the  product  (available  In  most  countries).  ©2003  Hewlett-Pad<ard  Development  Company,  LP. 
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If  you  arc  a  growing  enterprise,  your  need  for  new  software  always  exceeds  your  budget.  Or  does  it?  SAP  has  a  range  of  solutions 
to  fit  any  size  business  and  any  budget.  Solutions  that  can  be  up  and  running  quickly  —  even  in  a  matter  of  weeks.  .And  since  they’re 
modular  and  based  on  an  open  platform,  they  can  grow  and  expand  as  you  do.  SAP  has  over  30  years  of  experience  helping  businesses 
of  all  sizes  solve  business  issues.  Affordably. 

THE  BEST-RUN  BUSINESSES  RUN  SAP 


FOR  AN  OPPORTUNITY  TO  WIN  AN  ALL-EXPENSE-PAID  TRIP  TO  A  BUSINESS  MANAGEMENT 
SEMINAR,  LOG  ON  TO  SAP.COM/USA/AFFOROABLE  OR  CALL  888  592  1727 
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